[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: Hypervisor Support - Virtual Guest Image Versioning

From: Les Mikesell <lesmikesell_at_gmail.com>
Date: Tue, 13 Dec 2011 10:35:36 -0600

On Mon, Dec 12, 2011 at 11:44 PM, Nico Kadel-Garcia <nkadel_at_gmail.com> wrote:
>
> I profoundly dislike the Apache/SVN setup, and have said so before.
> This is partly because it's another layer of access control complexity
> that is orthogonal to the pre-commit or other built-in access
> configuration. The other, and more powerful reason, is that Linux and
> UNIX clients for Subversion store the passwords, by default, as
> plain-text in a well-known location in your home directory.
[...]
> So wherever feasible, I use svn+ssh.

If I have access to your home directory to see your saved password,
wouldn't I also be able to copy your ssh identity just as easily?

-- 
  Les Mikesell
    lesmikesell_at_gmail.com'
Received on 2011-12-13 17:36:11 CET

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.