Package: giver
Version: 0.1.8-2
Severity: wishlist

After looking at a tcpdump of a Giver session, I have seen that
communcations between peers are not encrypted.  Both filenames and
contents can be seen are sent as cleartext.

This makes Giver unsuitable to use on untrusted network, e.g. at
conferences, where it could be really useful to allow two participants
siting next to each others to quickly exchanges files.

-- System Information:
Debian Release: 5.0.2
  APT prefers stable
  APT policy: (500, 'stable'), (50, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)

Kernel: Linux 2.6.30-bpo.1-686 (SMP w/1 CPU core)
Locale: LANG=C, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages giver depends on:
ii  libavahi1.0-cil         0.6.19-2         CLI bindings for Avahi
ii  libc6                   2.7-18           GNU C Library: Shared libraries
ii  libglib2.0-cil          2.12.1-2         CLI binding for the GLib utility l
ii  libgnome2.0-cil         2.20.1-1         CLI binding for GNOME 2.20
ii  libgtk2.0-0             2.12.12-1~lenny1 The GTK+ graphical user interface 
ii  libgtk2.0-cil           2.12.1-2         CLI binding for the GTK+ toolkit 2
ii  libmono-corlib2.0-cil   1.9.1+dfsg-6     Mono core library (2.0)
ii  libmono-system2.0-cil   1.9.1+dfsg-6     Mono System libraries (2.0)
ii  libmono2.0-cil          1.9.1+dfsg-6     Mono libraries (2.0)
ii  libnotify0.4-cil        0.4.0~r2998-1    CLI library for desktop notificati
ii  libx11-6                2:1.1.5-2        X11 client-side library
ii  mono-runtime            1.9.1+dfsg-6     Mono runtime

giver recommends no packages.

giver suggests no packages.

-- no debconf information

Cheers,
-- 
Jérémy Bobbio                        .''`. 
lu...@debian.org                    : :Ⓐ  :  # apt-get install anarchism
                                    `. `'` 
                                      `-   

Attachment: signature.asc
Description: Digital signature

Reply via email to