https://bugzilla.wikimedia.org/show_bug.cgi?id=28050

Platonides <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[email protected]

--- Comment #2 from Platonides <[email protected]> 2011-03-15 00:34:31 UTC 
---
Just set a password like a4d35e93d6c0787428f2fdf6a29457e0.

If your bot can log into the wiki, an attacker which stole all your bot data
could as well.
If you don't like to store passwords into configuration files you can make the
bot to only store the authentication in memory, and to forget the password as
soon as it gets logged in.
Some bots also offer a middle alternative, which is prompting for the password
the first, and then working from the saved cookie. That cookie is
password-equivalent, but at least the password is not published.

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to