I agree with Alvaro about it being very low security, but I also disagree about having to change it... I receive almost once a month or two someone requesting me to recover his password because he saves it in amsn and never types it and he forgot about it... I would be really glad to just say "can't do it, leave me alone :D" but anyways.. there are many people who share the same config folder between windows and linux, so whenever the user reboots to a different system, he will need to reenter his pwd... it's not a great idea... about base64/hex yeah it's good, it's more than enough, but we never had any serious issues with the password.. and if you look at it, noone can decrypt that password unless he reads a bit of our code, which most people won't do... there are so many programs that save the password plain text in their config files as long as it's in ~/.something like subversion for example or webmin, I hate that, and if it was VERY POOR encryption, as long as it's encryption, I'm happy with it.. I don't think we should take action on this, it's not important... that's just my opinion though...
KKRT On Sun, Mar 18, 2007 at 11:10:44PM +0100, Álvaro J. Iradier wrote: > On 3/18/07, Vivia Nikolaidou <[EMAIL PROTECTED]> wrote: > > I'm not saying that it's a bad idea, but I can think of a few problems > > that we need to take into account > > > > 1) You change your network card / hard disk / whatever and 3 programs > > break - 2 due to licensing stupidities and amsn due to password > > decryption... > > AMSN doesn't break. Just enter your password again, and run until your > next network card / hard disk / whatever change. > > > 2) John Doe takes his .amsn from his laptop, copies it to his desktop > > (for synchronisation) just as he used to do for X years now, and > > suddenly he needs to reenter the password each time he does this... > > Well, maybe an advanced option to enable/disable password encryption? > I think the current system is just a joke. If you want to get the > password, you will. If you don't want to, you won't bother. We could > as well just hex encode it or use base64 instead of DES. > > > On 3/18/07, Álvaro J. Iradier <[EMAIL PROTECTED]> wrote: > > > Could we get a unique ID from the computer, and encrypt the password > > > using that ID? That way, if you send that config file to another user, > > > it can't be decrypted. Maybe we could use disk label / uuid, or > > > network card mac address or something like that. > > > > > > If you change the computer id, the password won't decrypt, and it will > > > just be forgotten. > > > > > > What do you think? I would code it, I just don't know what would be the > > > best ID. > > > > > > > > > > I know it's not always true in *THAT* case, but with amsn it's not.. > > > > it's can't be an md5 hash (which is a one > > > > way encryption) simply because we need to send the password to the msn > > > > servers, so we need to be able to decrypt > > > > it, so it's a two way encryption with a key, so knowing the code, you > > > > should know how to decrypt it from > > > > config.xml files... I did it many times already for stupid n00b users > > > > in the forum who forgot their passwords :@ > > > > anyways! > > > > > > > > KKRT > > > > > > > > ------------------------------------------------------------------------- > > > > Take Surveys. Earn Cash. Influence the Future of IT > > > > Join SourceForge.net's Techsay panel and you'll get the chance to share > > > > your > > > > opinions on IT & business topics through brief surveys-and earn cash > > > > http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV > > > > _______________________________________________ > > > > Amsn-devel mailing list > > > > Amsn-devel@lists.sourceforge.net > > > > https://lists.sourceforge.net/lists/listinfo/amsn-devel > > > > > > > > > > > > > -- > > > (:===========================================:) > > > Alvaro J. Iradier Muro - [EMAIL PROTECTED] > > > > > > ------------------------------------------------------------------------- > > > Take Surveys. Earn Cash. Influence the Future of IT > > > Join SourceForge.net's Techsay panel and you'll get the chance to share > > > your > > > opinions on IT & business topics through brief surveys-and earn cash > > > http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV > > > _______________________________________________ > > > Amsn-devel mailing list > > > Amsn-devel@lists.sourceforge.net > > > https://lists.sourceforge.net/lists/listinfo/amsn-devel > > > > > > > > > -- > > "Where is the life that we have lost in living? > > Where is the wisdom that we have lost in knowledge? > > Where is the knowledge that we have lost in information?" > > > > OEO; > > ------------------------------------------------------------------------- > > Take Surveys. Earn Cash. Influence the Future of IT > > Join SourceForge.net's Techsay panel and you'll get the chance to share your > > opinions on IT & business topics through brief surveys-and earn cash > > http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV > > _______________________________________________ > > Amsn-devel mailing list > > Amsn-devel@lists.sourceforge.net > > https://lists.sourceforge.net/lists/listinfo/amsn-devel > > > > > -- > (:===========================================:) > Alvaro J. Iradier Muro - [EMAIL PROTECTED] > > ------------------------------------------------------------------------- > Take Surveys. Earn Cash. Influence the Future of IT > Join SourceForge.net's Techsay panel and you'll get the chance to share your > opinions on IT & business topics through brief surveys-and earn cash > http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV > _______________________________________________ > Amsn-devel mailing list > Amsn-devel@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/amsn-devel ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys-and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV _______________________________________________ Amsn-devel mailing list Amsn-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amsn-devel
