search

muhammadnaveed / syncnotes2google

Automatically exported from code.google.com/p/syncnotes2google
0 stars 0 forks source link

Password stored in Plaintext #30

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago 
What steps will reproduce the problem?
Installing syncnotes2google

What is the expected output? What do you see instead?

What version of the product are you using? On what operating system?

Please provide any additional information below.
I am not comfortable with my google password sitting in plain text on my 
system, in a batch file.

What is a good way to prevent this from happening?

Original issue reported on code.google.com by poonamth...@gmail.com on 9 Mar 2010 at 5:54

GoogleCodeExporter commented 9 years ago

Original comment by henols on 22 Mar 2010 at 3:41

GoogleCodeExporter commented 9 years ago 
This would be nice to have resolved.

Original comment by chad.car...@gmail.com on 22 Mar 2010 at 4:33

GoogleCodeExporter commented 9 years ago 
I would like to see the password encrypted in some form.

Original comment by OshawaJ...@gmail.com on 5 Apr 2010 at 4:05

GoogleCodeExporter commented 9 years ago 
I agree that it would be nice to have this encrypted.  I use gpg to encrypt the
entire file and decrypt it when I want to sync.  Then I delete the clear text 
file
when I'm done with the sync.  Not glamorous, but functional.  Given that this 
is free
I willing to put a little work into that part myself.  I use a Mac (linux 
based).  A
little Googling found this for Windows 
(http://wolfram.org/writing/howto/gpg.html). 
There might be others but I just don't do Windoze.  Kind of using the big fly 
swatter
for a small fly, I know.  And if you've never used gpg, you need to know that 
you
have to provide a passphrase to encrypt and the same passphrase to decrypt and 
if you
forget the passphrase you used to encrypt a file, it's toast from what I 
understand
so it's crucial you pick something you can remember easily.

Original comment by Brad.McN...@gmail.com on 18 Apr 2010 at 12:26

GoogleCodeExporter commented 9 years ago 
I thought this was strange too, but at least with 2-step verification enabled 
on your Google account, you need only enter an application-specific password 
rather than your "real" one.  It's not perfect, but at least somebody can't log 
in to your Google account using the application-specific password.

Original comment by jmbin...@gmail.com on 24 Oct 2011 at 8:07

GoogleCodeExporter commented 9 years ago 
LotusNotes prompts for my password to read the calendar from my mail-database.
Thus I think interactive password input would also resolve this issue.

Original comment by w.wall...@gmail.com on 7 Nov 2011 at 3:23

GoogleCodeExporter commented 9 years ago 
I encrypted the properties file containing the clear text password.

Original comment by chrisdid...@gmail.com on 19 Nov 2011 at 12:43