Changes between Initial Version and Version 36 of Ticket #5530


Ignore:
Timestamp:
09/10/15 19:10:16 (6 years ago)
Author:
Tim Kosse
Comment:

I don't see any extra security with your patch. Let's assume your system gets compromised with a piece of malware. What prevents the malware from simply reading the encrypted files and calling CryptUnprotectData itself?

And if they implement a more secure and portable solution such as a "main password" ala Firefox, they will be blessed for even longer :)

Note that you can disable saving of passwords in the settings dialog of FileZilla. Think of it as having a main password for each server you connect to. :)

Legend:

Unmodified
Added
Removed
Modified
  • Ticket #5530

    • Property Status newreopened
    • Property Operating system type Windows
    • Property Cc chinaski geoff.j.lawrence@… added
    • Property Type Bug reportFeature request
    • Property Summary Encrypt stored passwordsEncrypt stored passwords (using file system facilities; NOT master password)
    • Property Priority normalhigh
    • Property Operating system version Win2k and up