> I'm from the group that says that obscuring the passwords isn't useful. > You get better protection by OS level file permissions.
You don't get better protection by file permision. You get better protection using both. If you think that system administrator and jabber user must know the MSN password for every user, it might be right for you. But I don't feel comfortable when I can edit (as root or jabber, obviously) a file using vi and get passwords without effort. Just see the logs is enough, as username and passwords are spread over. I might even admit such a thing for the jabber accounts which are in-house ones, but not for MSN accounts which are "property" of the users. That is the reason I decided to obscure the passwords. Not perfect but better than nothing. And it will be a workaround until I get time or need to modify jabberd itself to increase security of transport passwords. If you feel safe with plain text passwords, up to you. Javier Palacios <DIV><FONT size="1"> ============================================================================ This e-mail message and any attached files are intended SOLELY for the addressee/s identified herein. It may contain CONFIDENTIAL and/or LEGALLY PRIVILEGED information and may not necessarily represent the opinion of this company. If you receive this message in ERROR, please immediately notify the sender and DELETE it since you ARE NOT AUTHORIZED to use, disclose, distribute, print or copy all or part of the contained information. Thank you. ============================================================================ </FONT></DIV> -------------- next part -------------- An HTML attachment was scrubbed... URL: http://modevia.com/pipermail/py-transports/attachments/20050406/d778990f/attachment.htm From [EMAIL PROTECTED] Thu Apr 7 01:54:28 2005 From: [EMAIL PROTECTED] (Jeremy Lunn) Date: Thu Apr 7 01:54:52 2005 Subject: [py-transports] PyMSNt 0.10-preview1 released! In-Reply-To: <[EMAIL PROTECTED]> References: <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> Message-ID: <[EMAIL PROTECTED]> On Tue, Apr 05, 2005 at 07:35:18PM +0100, Gustavo Felisberto wrote: > [EMAIL PROTECTED] pymsnt-65 $ ./PyFT > Traceback (most recent call last): > File "main.py", line 21, in ? > import misciq > File "/home/humpback/jabber/tanga/testes/pymsnt-65/src/misciq.py", > line 12, in ? > import legacy > File > "/home/humpback/jabber/tanga/testes/pymsnt-65/src/legacy/__init__.py", > line 2, in ? > from receive import LegacyFileReceiver > ImportError: cannot import name LegacyFileReceiver Yeah I got this as well, also the transport itself was bouncing messages with: "Error. You must log into the transport before sending messages." Even though I was logged in and it was giving me presence for MSN users. Guess we'll just have to wait for a more stable version. -- Jeremy Lunn Melbourne, Australia Homepage: http://www.austux.net/ From [EMAIL PROTECTED] Fri Apr 15 11:16:39 2005 From: [EMAIL PROTECTED] (Jonas =?iso-8859-1?Q?=C5dahl?=) Date: Fri Apr 15 11:16:57 2005 Subject: [py-transports] Nicknames in roster-subsync in PyICQ-t Message-ID: <[EMAIL PROTECTED]> Skipped content of type multipart/mixed-------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 185 bytes Desc: not available Url : http://modevia.com/pipermail/py-transports/attachments/20050415/beb2d686/attachment.pgp From [EMAIL PROTECTED] Fri Apr 15 11:55:09 2005 From: [EMAIL PROTECTED] (Daniel Henninger) Date: Fri Apr 15 11:55:05 2005 Subject: [py-transports] Nicknames in roster-subsync in PyICQ-t In-Reply-To: <[EMAIL PROTECTED]> References: <[EMAIL PROTECTED]> Message-ID: <[EMAIL PROTECTED]> Thanks! I've applied this to the source tree. (I wouldn't check it out right now as it has half of another patch I'm working on lol dooh) Daniel -- "The most addictive drug in the world is music." - The Lost Boyz > Server side nicknames imported from the server side contact list isn't > properly propagated. This patch adds this functionality. > > As roster-subsync isn't supported in any clients that we know of there is > a > web registration form that Magnus has made. > > http://zion.olf.sgsnet.se:8080/wakka/WUR > > /Jonas & Magnus > _______________________________________________ > py-transports mailing list > [email protected] > http://www.modevia.com/cgi-bin/mailman/listinfo/py-transports >
