full-disclosure - Re: Security issue in Filezilla 3.0.9.2:passwordsare stored in plain text (sitemanager.xml)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <7230.1208797032@turing-police.cc.vt.edu>
Date: Mon, 21 Apr 2008 12:57:12 -0400
From: Valdis.Kletnieks@...edu
To: Joey Mengele <joey.mengele@...hmail.com>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: Security issue in Filezilla
	3.0.9.2:passwordsare stored in plain text (sitemanager.xml)

On Mon, 21 Apr 2008 12:04:41 EDT, Joey Mengele said:
> I think you are mistaken. Perhaps you have an outdated version of 
> the document in question?

No, it is you that is sadly mistaken.

IETF RFCs are not versioned.  If substantial changes are made, the
document is re-issued with a new number.  And you'd know that if you
had actually spent any significant time reading RFCs.

Hint: When arguing about the contents of an RFC, it's usually advisable
to actually have found and read said RFC before opening your mouth in order
to insert your foot.

Content of type "application/pgp-signature" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/