Bug#823004: gplaycli: sensitive information in config file

2016-12-01 Thread Paul Wise
On Wed, 2016-11-09 at 12:42 +0800, Paul Wise wrote: > I suggest this bug report be closed wontfix. This bug has now caused gplaycli to be removed from Debian stretch. Is there any progress to report? -- bye, pabs https://wiki.debian.org/PaulWise signature.asc Description: This is a digitall

Bug#823004: gplaycli: sensitive information in config file

2016-11-13 Thread Paul Wise
On Sun, 2016-11-13 at 10:53 +0100, Matlink wrote: > Another solution would be to tell gplaycli to fetch the credentials > from a server. In this case, when the credentials are changed, I just > have to change this file on the server and every instance of gplaycli > will fetch this file and have th

Bug#823004: gplaycli: sensitive information in config file

2016-11-13 Thread Matlink
Another solution would be to tell gplaycli to fetch the credentials from a server. In this case, when the credentials are changed, I just have to change this file on the server and every instance of gplaycli will fetch this file and have the new credentials. Pros: * no need to update gplaycli w

Bug#823004: gplaycli: sensitive information in config file

2016-11-09 Thread Paul Wise
On Wed, 2016-11-09 at 10:20 +0100, matlink wrote: > Is that for privacy? Exactly. -- bye, pabs https://wiki.debian.org/PaulWise signature.asc Description: This is a digitally signed message part

Bug#823004: gplaycli: sensitive information in config file

2016-11-09 Thread matlink
Why? Creating a Google account would make gplaycli work. Is that for privacy? Le 09/11/2016 à 10:18, Paul Wise a écrit : > On Wed, 2016-11-09 at 10:17 +0100, matlink wrote: > >> If we could automatically create a Google account through command >> line it would be an acceptable solution. > That wo

Bug#823004: gplaycli: sensitive information in config file

2016-11-09 Thread matlink
I understand. We're looking for a solution that won't remove them and prevent anyone except me to change the password. Le 09/11/2016 à 09:43, Paul Wise a écrit : > On Wed, 2016-11-09 at 08:20 +0100, Matlink wrote: > >> there is a potential big issue with providing default credentials > The defaul

Bug#823004: gplaycli: sensitive information in config file

2016-11-09 Thread Paul Wise
On Wed, 2016-11-09 at 08:20 +0100, Matlink wrote: > there is a potential big issue with providing default credentials The default shared credentials are the main advantage of this package. I wouldn't have any reason to use it without them. -- bye, pabs https://wiki.debian.org/PaulWise signat

Bug#823004: gplaycli: sensitive information in config file

2016-11-08 Thread Matlink
agree, but there is a potential big issue with providing default credentials : the google account will be subject to password change, and the more the package is used the more often this password will be changed. Password change means for me reset the password, update the default credentials and

Bug#823004: gplaycli: sensitive information in config file

2016-11-08 Thread Paul Wise
On Mon, 7 Nov 2016 19:26:57 +0100 Hans-Christoph Steiner wrote: > I think the best way forward for this issue is for the gplaycli > package to leave out the default credentials. This will make the package essentially useless. I suggest this bug report be closed wontfix. -- bye, pabs https://wi

Bug#823004: gplaycli: sensitive information in config file

2016-11-07 Thread Matlink
Re, Le 07/11/2016 à 19:03, Lee Garrett a écrit : > Hi, > > On 07/11/16 17:56, matlink wrote: >> Hi Lee, >> >> Well the main goal for gplaycli was to provide a noconf and very easy to >> use command line for downloading apks. > I totally see the appeal, which is why I'm using it and want to see it

Bug#823004: gplaycli: sensitive information in config file

2016-11-07 Thread Hans-Christoph Steiner
dummydroid is already included in Debian :-D I think the best way forward for this issue is for the gplaycli package to leave out the default credentials. Then make it as easy as possible for people to set up the credentials using dummydroid.

Bug#823004: gplaycli: sensitive information in config file

2016-11-07 Thread Lee Garrett
Hi, On 07/11/16 17:56, matlink wrote: > Hi Lee, > > Well the main goal for gplaycli was to provide a noconf and very easy to > use command line for downloading apks. I totally see the appeal, which is why I'm using it and want to see it in good shape in Debian. :) I'm personally working towards

Bug#823004: gplaycli: sensitive information in config file

2016-11-07 Thread matlink
Hi Lee, Well the main goal for gplaycli was to provide a noconf and very easy to use command line for downloading apks. Creating a google account is for some people not the best idea, because they either disagree with their ToS or they don't want to give Google too many infos (AFAIK Google requir

Processed: Re: Bug#823004: gplaycli: sensitive information in config file

2016-11-07 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > severity 823004 serious Bug #823004 [gplaycli] gplaycli: sensitive information in config file Severity set to 'serious' from 'normal' > tags 823004 upstream Bug #823004 [gplaycli] gplaycli: sensitive information in config file Added tag(s) upstrea