[sylpheed:34932] accountrc windows

Tom Wiles whereistomm at gmail.com
Sun Dec 11 01:59:38 JST 2011


Dear users,

Today i've installed sylpheed for windows and while i was checking it out i
found out that the file accountrc contains all the passwords in clear!

Now, if someone for some reason gains a read access to a windows machine
would be able to read all email password.

How is it possibile?

Is there a fix for this? I've also check sylpheed claws, and the password
there looks encrypted. I would like to try out this sylpheed but not with
such a security threat.

Is there any solution or upcoming patch?

thank you.


More information about the Sylpheed mailing list