search

mopidy / mopidy-scrobbler

Mopidy extension for scrobbling played tracks to Last.fm
https://mopidy.com/ext/scrobbler/
Apache License 2.0
66 stars 14 forks source link

Encrypt passwords #25

Open schvabodka-man opened 6 years ago

schvabodka-man commented 6 years ago

Add possibility to encrypt your stuff. Using as is is very insecure

jjok commented 6 years ago

Which stuff do you mean?

schvabodka-man commented 6 years ago

Stuff in your mopidy config for scrobbler. You know, username and password for last.fm

dz0ny commented 6 years ago

But those are not publicly accessible, they are secured under system security model. Only users with read access should be able to read them, that's why we recommend running under a different user.

The /etc/mopidy/mopidy.conf should have permission 600, in that case, owner of that file can read it and of course superuser.

https://docs.mopidy.com/en/latest/service/#running-as-a-service https://en.wikipedia.org/wiki/File_system_permissions

schvabodka-man commented 6 years ago

Yes, you can do chmod 600, but the're still in plain text format

marsjaninzmarsa commented 6 years ago

Duplicate of #1.

evamvid commented 5 years ago

I've submitted PR #27, which does this.