30 Jul
2009
30 Jul
'09
2:03 p.m.
Alexander.Kuchler@pruftechnik.com schreef:
Dear group,
today I figured out you are saving the password entered during the startup of the session in plain text in C:\Documents\%User%\.x2go\ssh\. And not even delete it after closing the session..
You can not be serious!?
Especially when knowing you are promoting X2Go for schools etc. where different people might access the same terminals this is not only dangerous but breakneck.
I have searched for passwords, but I did not found them in /home/username/.x2go/ssh/*. Seems to be a Windows-client specific problem.
With regards, Paul van der Vlis.