frogflower / bluecop-xbmc-repo

Automatically exported from code.google.com/p/bluecop-xbmc-repo
0 stars 0 forks source link

Amazon plugin stores passwords in plaintext #194

Open GoogleCodeExporter opened 8 years ago

GoogleCodeExporter commented 8 years ago
What steps will reproduce the problem?
1. Enable Amazon Video Plugin
2. Enter a username and password in the Amazon Plugin Configuration settings
3. View the plaintext password is saved in 
~/.xbmc/userdata/addon_data/plugin.video.amazon/settings.xml

I expected the password to be encrypted or a token from Amazon to be saved in 
the settings file, not the plaintext password.  Having a plain text password 
with real purchasing power saved to my TV Box make me very worried.  There has 
to be a better way.

Kubuntu 12.04, xbmc 11.0, Bluecop Amazon Plugin 0.6.4

Original issue reported on code.google.com by bill.far...@gmail.com on 11 Dec 2012 at 4:24

GoogleCodeExporter commented 8 years ago
This is a very good concern and I would like to see an encrypted system for the 
password.

Original comment by Xentar1...@gmail.com on 2 Feb 2013 at 3:57