Comment 2 for bug 462994

Revision history for this message
Innomen (brandon-sergent) wrote :

I call my account logins and passwords being stored in an unknown place possibly plain text by the now default Ubuntu IM client a security vulnerability.

The locations of configuration files need to be disclosed. I want to delete EVERY TRACE of this application from my system. Most especially my logins in passwords which is the one chunk of information it most strenuously holds on to.

I've halted all automated bug reporting because I don't know if its going to grab those logins and post them for the world to see.

IM logins are not just im, they are facebook and gmail logins as well, and that leads to virtually everything else.

This most certainly IS a security issue.