There is an undocumented feature in TSVN which allows you to show the 
passwords of cached credentials in plaintext.

  - go to Settings->Saved Data->Authentication data->Clear...
  - a dialog "Remove Saved Authentication Data" is shown with a list of 
your cached credentials with the columns "Kind" ,"Realm String", "Username"
  - select one of the rows and execute a "Ctrl-Shift-Doubleclick" action
  - this action will now add a fourth column named "Password/phrase". this 
column shows all caches passwords in plaintext.

See also:

https://stackoverflow.com/questions/5910965/recover-svn-password-from-local-cache#5919519

This is a potential security issue and I would suggest a change in TSVN 
which either 
  - completely removes this feature 
    or
  - deactivates this behavior by default while providing an option in 
advanced settings to turn it on again


-- 
You received this message because you are subscribed to the Google Groups 
"TortoiseSVN" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/tortoisesvn/d4464425-2d18-4b2a-ad69-0cbd814b81fc%40googlegroups.com.

Reply via email to