Re: Security flaw: subversion stores passwords by default

On 2008-03-20 01:02:35 +0100, Hadmut Danisch wrote:
> Just read that:
>
> " Trust your OS to protect data on disk."
>
> That's nonsense.

Yes, even though the OS can protect data on disk, there are great
applications (run by the user) that can read them and send them
to arbitrary remote servers:

  https://bugzilla.mozilla.org/show_bug.cgi?id=230606

AFAIK, this bug is still present in Firefox 2 (all versions).

-- 
Vincent Lefèvre <vincent@vinc17.org> - Web: <http://www.vinc17.org/>
100% accessible validated (X)HTML - Blog: <http://www.vinc17.org/blog/>
Work: CR INRIA - computer arithmetic / Arenaire project (LIP, ENS-Lyon)
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe_at_subversion.tigris.org
For additional commands, e-mail: users-help_at_subversion.tigris.org