Well, finally someone was hurt by it and fixed it in
https://it.slashdot.org/story/16/11/06/035212/user-forks-filezilla-ftp-
client-after-getting-hacked
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
** Bug watch removed: SourceForge.net Tracker #1914680
http://sourceforge.net/support/tracker.php?aid=1914680
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/202114
Title:
Passwords saved as plain
** Tags removed: 12.10
** Tags added: precise
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/202114
Title:
Passwords saved as plain text
To manage notifications about this bug go to:
Too bad This discourages me from using filezilla until this is
supported.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/202114
Title:
Passwords saved as plain text
To manage notifications about
Since Filezilla won't get a feature like master password or integration
in keyrings, see http://trac.filezilla-project.org/ticket/1373 , I
suggest using a password manager like KeepassX and disable password
saving in Filezilla. You still can save URLs and usernames in Filezilla
but copy passwords
** Changed in: filezilla (Ubuntu)
Status: Confirmed = In Progress
** Changed in: filezilla (Ubuntu)
Assignee: (unassigned) = Adrien Cunin (adri2000)
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
** Branch linked: lp:debian/experimental/filezilla
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/202114
Title:
Passwords saved as plain text
To manage notifications about this bug go to:
** Changed in: filezilla (Debian)
Status: Confirmed = Fix Released
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/202114
Title:
Passwords saved as plain text
To manage notifications about
This bug was fixed in the package filezilla - 3.6.0.2-1ubuntu1
---
filezilla (3.6.0.2-1ubuntu1) raring; urgency=low
* Merge from Debian experimental. Remaining Ubuntu change:
- Added debian/patches/11_use-decimal-si-by-default.patch in order to
comply with UnitsPolicy
** Tags added: 12.10
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/202114
Title:
Passwords saved as plain text
To manage notifications about this bug go to:
You can disable saving of passwords in the settings dialog of FileZilla.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/202114
Title:
Passwords saved as plain text
To manage notifications about
** Changed in: filezilla (Debian)
Status: New = Confirmed
--
Passwords saved as plain text
https://bugs.launchpad.net/bugs/202114
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
ubuntu-bugs mailing list
** Changed in: filezilla
Status: New = Unknown
--
Passwords saved as plain text
https://bugs.launchpad.net/bugs/202114
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
** Changed in: filezilla
Status: Unknown = New
--
Passwords saved as plain text
https://bugs.launchpad.net/bugs/202114
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
FileZilla moved from SF Tracker to Trac
** Bug watch added: trac.filezilla-project.org/ #1373
http://trac.filezilla-project.org/ticket/1373
** Changed in: filezilla
Remote watch: SourceForge.net Tracker #1914680 = trac.filezilla-project.org/
#1373
--
Passwords saved as plain text
perhaps filezilla can use keyring like gnome-keyring or other thing ...
--
Passwords saved as plain text
https://bugs.launchpad.net/bugs/202114
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
ubuntu-bugs mailing list
FileZilla 3.1.2 (now in intrepid) implements a kiosk mode in which FZ
doesn't write any password to disk.
--
Passwords saved as plain text
https://bugs.launchpad.net/bugs/202114
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
** Bug watch added: Debian Bug tracker #490891
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=490891
** Also affects: filezilla (Debian) via
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=490891
Importance: Unknown
Status: Unknown
--
Passwords saved as plain text
** Changed in: filezilla (Debian)
Status: Unknown = New
--
Passwords saved as plain text
https://bugs.launchpad.net/bugs/202114
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
ubuntu-bugs mailing list
Tim: I understand your point. I suggest two things though,
1- support for obscuring the passwords, understanding all the
limitations that this has. Even being trivial, it would require more
than taking the disk out of the machine and using vi or gedit to
look at the password, and that has some
This is by design, it is the task of the operating system to protect the
user's files. Please encrypt your home directory.
--
Passwords saved as plain text
https://bugs.launchpad.net/bugs/202114
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to
That is a bit simple security design decision IMHO. Sometimes other
people have access to home dirs and backups, like sys admins, and a bit
more encryption that plain text would be desirable. Hopefully the
password would get some encryption.
--
Passwords saved as plain text
And what prevents the sys admin from installing a program that
intercepts your private data the next time you get it out of the
keychain?
Point is: If you can't trust root, don't use the system.
--
Passwords saved as plain text
https://bugs.launchpad.net/bugs/202114
You received this bug
The .filezilla directory itself is mode 700, so no one can read the
plaintext passwords. That said, it would be a good idea for filezilla
to use the Gnome Keyring instead of storing plain text passwords.
** Changed in: filezilla (Ubuntu)
Importance: Undecided = Wishlist
Status: New =
Reported upstream (Sourceforge bug tracker) located here:
http://sourceforge.net/tracker/index.php?func=detailaid=1914680group_id=21558atid=372241
** Bug watch added: SourceForge.net Tracker #1914680
http://sourceforge.net/support/tracker.php?aid=1914680
** Also affects: filezilla via
25 matches
Mail list logo
