<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div>I join Andrea; Jonni can we have more details? Thanks!</div><div><br></div><div>Best,</div><div>tk<br><br>Von meinem iPad gesendet</div><div><br>Am 13.8.2014 um 0.00 schrieb Andrea Bernabei <<a href="mailto:and.bernabei@gmail.com">and.bernabei@gmail.com</a>>:<br><br></div><blockquote type="cite"><div><div dir="ltr">Jonni, do you have more information to share?<div><br></div><div>your comment to that thread says that Jolla was already working on fixing it during May, is there any news? :)</div></div><div class="gmail_extra">
<br><br><div class="gmail_quote">2014-08-12 12:33 GMT+02:00 Jonni Rainisto <span dir="ltr"><<a href="mailto:jonni.rainisto@jolla.com" target="_blank">jonni.rainisto@jolla.com</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div>
<div style="direction:ltr;font-family:Tahoma;color:#000000;font-size:10pt"><a href="https://together.jolla.com/question/37710/dbus-monitor-shows-exchange-mail-password-in-clear-text/" target="_blank">https://together.jolla.com/question/37710/dbus-monitor-shows-exchange-mail-password-in-clear-text/</a><br>
<br>
<div style="font-family:Times New Roman;color:#000000;font-size:16px">
<hr>
<div style="direction:ltr"><font color="#000000" face="Tahoma"><b>From:</b> <a href="mailto:devel-bounces@lists.sailfishos.org" target="_blank">devel-bounces@lists.sailfishos.org</a> [<a href="mailto:devel-bounces@lists.sailfishos.org" target="_blank">devel-bounces@lists.sailfishos.org</a>] on behalf of Tone Kastlunger [<a href="mailto:users.giulietta@gmail.com" target="_blank">users.giulietta@gmail.com</a>]<br>
<b>Sent:</b> Tuesday, August 12, 2014 1:29 PM<br>
<b>To:</b> <a href="mailto:devel@lists.sailfishos.org" target="_blank">devel@lists.sailfishos.org</a><br>
<b>Subject:</b> [SailfishDevel] Potential security issue ? DBUS leaking passwords in cleartext<br>
</font><br>
</div><div><div class="h5">
<div></div>
<div>
<div dir="ltr">
<div>
<div>
<div>Hi all;<br>
it seems some (google?) DBUS sso service is leaking pw's in cleartext.<br>
</div>
Please see here : <br>
<br>
signal sender=:1.1322 -> dest=(null destination) serial=13 path=/com/google/code/AccountsSSO/SingleSignOn/AuthSession_0; interface=com.google.code.AccountsSSO.SingleSignOn.AuthSession; member=stateChanged<br>
int32 8<br>
string "The request is started successfully"<br>
method return sender=:1.1322 -> dest=:1.36 reply_serial=4633<br>
array [<br>
dict entry(<br>
string "Secret"<br>
variant string "mypasswordincleartext"<br>
)<br>
dict entry(<br>
string "UserName"<br>
variant string "ktone"<br>
)<br>
]<br>
<br>
</div>
<div>I myself am not worried on the google origin, but rather on the cleartext password.<br>
</div>
<div>Giving it was leaking one of my working mail's password, I assume it could be the
<br>
Exchangle plugin?<br>
</div>
<div>Can jolla please confirm / deny?<br>
</div>
<br>
</div>
<div><br>
</div>
Best,<br>
tk<br>
</div>
</div>
</div></div></div>
</div>
</div>
<br>_______________________________________________<br>
<a href="http://SailfishOS.org">SailfishOS.org</a> Devel mailing list<br>
To unsubscribe, please send a mail to <a href="mailto:devel-unsubscribe@lists.sailfishos.org">devel-unsubscribe@lists.sailfishos.org</a><br></blockquote></div><br></div>
</div></blockquote><blockquote type="cite"><div><span>_______________________________________________</span><br><span><a href="http://SailfishOS.org">SailfishOS.org</a> Devel mailing list</span><br><span>To unsubscribe, please send a mail to <a href="mailto:devel-unsubscribe@lists.sailfishos.org">devel-unsubscribe@lists.sailfishos.org</a></span></div></blockquote></body></html>