On Saturday 14 December 2013 17:20:22 Tornóci László wrote: > On 12/14/2013 04:40 PM, Bernhard Posselt wrote: > > That feature was part of the music application, the music application > > was a security risk and had no maintainer, thats why it was dropped. > > There is a new alpha release from a different maintainer on the appstore > > which you can try. I dont think it features ampache integration. > > > > Apart from that supporting the ampache API weakens your password > > security (by a lot) and allows the use of rainbow tables to crack your > > password. Just sayin. > > That's something I thought of myself, too. Is there a difference here > between services that OC provides? There are quite a few services > (webdav file, address book, calendar sync, mozilla sync). Are these > services any better from the security point than the ampache API? The > more services we use on different gadgets the more the security risk, > that is clear. But is there any difference between services? Just curious. > > Yours: Laszlo
As far as I know ampache is an exception since ampache requires us to store the sha256 hash of the password, for things like cal/card/webdav we can choose our own password storage format (bcrypt) - Robin Appelman _______________________________________________ Owncloud mailing list [email protected] https://mail.kde.org/mailman/listinfo/owncloud
