Ubuntu QA:
BlogBrainstormPackage status
Log in
Ubuntu QA
The Ubuntu community has contributed 13716 ideas, 65290 comments, 1273844 votes

Idea #4728: Pidgin master password



up
288
down
Written by rumli the 15 Mar 08 at 14:08. Category: Internet & Networking.
Related to: Nothing/Others. Status: New
Description
Pidgin stores passwords in a plain-text file, and it doesn't look like that is going to change any time soon. (See http://developer.pidgin.im/wiki/PlainTextPasswords)

I am very uncomfortable with storing my Google accounts passwords (for Google Talk) in plain text. Is it possible to make a Pidgin plugin available from apt that would allow for passwords to be encrypted on disk by a master password, similar to Firefox and Thunderbird?
Tags: (none)

Attachments


Duplicates


Comments
Auzy wrote on the 15 Mar 08 at 14:48
You mean store them in the keychain (that would be the best way)

Auzy wrote on the 15 Mar 08 at 14:59
+1 though

Ssdg wrote on the 15 Mar 08 at 16:30
I think it's a good idea (it would be a better one if it was done for all pidgin users, ubunteros, Linux user and windows users too (doing something that use "high-level" API/libraries to do it).

the reason of this comment: I use windows sometimes and I use pidgin on an usb key. (egoism? where?)

tohomas wrote on the 15 Mar 08 at 17:19
so would this be considered a pidgin issue and not a ubuntu issue?

Lee wrote on the 15 Mar 08 at 17:32
Switch to KDE and Kopete. KDE has a wallet for passwords as standard. How many flaws do you have to find that only exist in GNOME before you realise why surveys show more people using KDE?

ebrahim wrote on the 15 Mar 08 at 19:23
@Lee: Thanks! You said what I came here to say! :D

Eldmannen wrote on the 15 Mar 08 at 20:19
My friend read my password from the password file, then he logged into my account and made my girlfriend strip!

Ralf.Nieuwenhuijsen wrote on the 16 Mar 08 at 03:24
@lee

Is this really the appropiate place for another gnome-vs-kde flamewar.

I can make a list of things that annoy the crap out of me with Kopete. And the majority of the people are using gnome, not kde. But gnome is the default, so all this statistics mean nothing.

Please change your diaper and go troll somewhere else.

Ralf.Nieuwenhuijsen wrote on the 16 Mar 08 at 03:25
@ebrahim

This is a brainstoming website. If you came here to bash gnome, than what the f__ is wrong with you? Why spent your time like that? How is that usefull?

Vadim P. wrote on the 16 Mar 08 at 03:49
@Lee: I'm looking to get a more secure option in Pidgin, not switch my IM client and the Desktop Environment with it. Your comment is not helpful.

changlinn wrote on the 16 Mar 08 at 12:38
Why not do full disk encryption with truecrypt or just these files with truecrypt to cryptkeeper

kenden wrote on the 17 Mar 08 at 15:26
+1, very annoying behavior from pidgin. I'd like to be able not to type my password every time I start it, which I won't do until it stops storing them in *clear* in the config files

ay wrote on the 18 Mar 08 at 06:19
At the end of http://developer.pidgin.im/wiki/PlainTextPasswords they mention that they're open to integrating with keyring implementations (such as how NetworkManager stores passwords) but they're concerned about multi-platform builds, etc.

How about a patch that, for gnome and other targets that support it, stores the passwords in the keyring, and otherwise reverts to their default behavior? The Ubuntu package for pidgin would then have this applied, and the upstream developers would be free to integrate it or drop it, but we'd at least stop storing passwords in plain text. I really don't buy their argument for leaving it as-is otherwise.

Winael wrote on the 4 Apr 08 at 23:32
With a security failure permitting to be root, it's very dangerous for the different accunt email

Mebus wrote on the 17 Apr 08 at 13:48
There's a patch for pidgin, that can be used for older version:

http://www.ubuntugeek.com/fix-for-master-password-expose-for-pidgin.html

"This will work for pidgin 2.1.0,2.1.1 versions."

Unfortunately this doesn't work with the current version.

Mebus


Post your comment