[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: Passwords are saved as clear text in Windows registry

From: Carl Duisberg <carl.duisberg_at_gmx.de>
Date: Wed, 17 Jun 2009 23:18:03 +0200

-------- Original-Nachricht --------
> Datum: Fri, 12 Jun 2009 18:52:05 -0700 (PDT)
> Von: Greywolf <greywolf_at_starwolf.com>
> An: users_at_tortoisesvn.tigris.org
> Betreff: Re: Passwords are saved as clear text in Windows registry

> [Thus spake Stefan Küng ("SK: ") 7:35pm...]
>
> SK: Seriously? You've set up your computer to allow remote registry
> access?
>

TortoiseSVN 1.6.2, Build 16344 - 32 Bit , 2009/05/09 13:46:29
exposes passwords as clear text in the registry.

In companies typical users are not administrators of their laptops.
Administrators often setup remote registry access to monitor
software installed or they use remote logon.

Users are not allowed to expose passwords to administrators. This
results in TortoiseSVN being a non compliant software.

Please, change TortoiseSVN to ask for the proxy password interactively.

The password should be requested via a dialog
- on first access of the proxy after starting TortoiseSVN
- on refusal of a password by the proxy (the password may have
  been changed during the runtime of the program)

Best regards

Carl

-- 
GRATIS für alle GMX-Mitglieder: Die maxdome Movie-FLAT!
Jetzt freischalten unter http://portal.gmx.net/de/go/maxdome01
------------------------------------------------------
http://tortoisesvn.tigris.org/ds/viewMessage.do?dsForumId=4061&dsMessageId=2362989
To unsubscribe from this discussion, e-mail: [users-unsubscribe_at_tortoisesvn.tigris.org].
Received on 2009-06-18 07:00:10 CEST

This is an archived mail posted to the TortoiseSVN Users mailing list.