search

archlinuxfr / aurvote

Tool to vote for favorite AUR packages
50 stars 4 forks source link

password not hash on ~/.config/aurvote #17

Open null0x0 opened 8 years ago

null0x0 commented 8 years ago

The password is not hashed on config file. For security reason, this is very bad. I will not use it, until aurvote provides better method to hash the password or can be read using another 3rd party application.

xordspar0 commented 7 years ago

The password can't be hashed, since the AUR needs the plain text password in the URL to log in. It could be encrypted, though, similar to a keyring.

sanderboom commented 7 years ago

Agree with @null0x0: I won't use (or vote for it ;)) until aurvote does not store my password in plain text anymore. I'd rather prefer to enter my password for every command.

Ah. aurvote-git seems to do this, looking at https://github.com/archlinuxfr/aurvote/blob/master/aurvote#L173 :]

salif commented 5 years ago

It would be great if works with Gnome Keyring