<html dir="ltr">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style id="owaParaStyle" type="text/css">P {margin-top:0;margin-bottom:0;}</style>
</head>
<body ocsi="0" fpstyle="1">
<div style="direction: ltr;font-family: Tahoma;color: #000000;font-size: 10pt;"><a href="https://together.jolla.com/question/37710/dbus-monitor-shows-exchange-mail-password-in-clear-text/" target="_blank">https://together.jolla.com/question/37710/dbus-monitor-shows-exchange-mail-password-in-clear-text/</a><br>
<br>
<div style="font-family: Times New Roman; color: #000000; font-size: 16px">
<hr tabindex="-1">
<div style="direction: ltr;" id="divRpF578345"><font color="#000000" face="Tahoma" size="2"><b>From:</b> devel-bounces@lists.sailfishos.org [devel-bounces@lists.sailfishos.org] on behalf of Tone Kastlunger [users.giulietta@gmail.com]<br>
<b>Sent:</b> Tuesday, August 12, 2014 1:29 PM<br>
<b>To:</b> devel@lists.sailfishos.org<br>
<b>Subject:</b> [SailfishDevel] Potential security issue ? DBUS leaking passwords in cleartext<br>
</font><br>
</div>
<div></div>
<div>
<div dir="ltr">
<div>
<div>
<div>Hi all;<br>
it seems some (google?) DBUS sso service is leaking pw's in cleartext.<br>
</div>
Please see here : <br>
<br>
signal sender=:1.1322 -> dest=(null destination) serial=13 path=/com/google/code/AccountsSSO/SingleSignOn/AuthSession_0; interface=com.google.code.AccountsSSO.SingleSignOn.AuthSession; member=stateChanged<br>
int32 8<br>
string "The request is started successfully"<br>
method return sender=:1.1322 -> dest=:1.36 reply_serial=4633<br>
array [<br>
dict entry(<br>
string "Secret"<br>
variant string "mypasswordincleartext"<br>
)<br>
dict entry(<br>
string "UserName"<br>
variant string "ktone"<br>
)<br>
]<br>
<br>
</div>
<div>I myself am not worried on the google origin, but rather on the cleartext password.<br>
</div>
<div>Giving it was leaking one of my working mail's password, I assume it could be the
<br>
Exchangle plugin?<br>
</div>
<div>Can jolla please confirm / deny?<br>
</div>
<br>
</div>
<div><br>
</div>
Best,<br>
tk<br>
</div>
</div>
</div>
</div>
</body>
</html>