unit13 0 Posted ... Eddie client saves login and password information in AirVPN.xml as cleartext! I am suggesting this information be hashed when saved, if possible. <?xml version="1.0" encoding="utf-8"?><eddie> <options> <option name="login" value="your-saved-email-address@sample-email-address.com" /> <option name="password" value="your-AirVPN-password-in-cleartext" /> <option name="remember" value="True" />... Quote Share this post Link to post
go558a83nk 292 Posted ... Maybe I'm not thinking of every possible situation but if a malicious somebody has access to that xml file then it's already over for you - they've gained access to your machine. My VPN username and password would be way down the list of worries. Quote Share this post Link to post
OpenSourcerer 952 Posted ... Hi! Referencing Windows version.I just noticed: Why is the AirVPN password in the AirVPN.xml saved in plain text. Is there a chance to save it hashed, at least? Regards, giga Hello! No, that's not planned at the moment. To save it encrypted in a safe way you should enter a master password (like you do with browsers) that is not stored anywhere, so it would be totally identical to as it is now when you don't keep "Remember" ticked. Different methods can be invented and made secure regardless of client program source code exposure but what would the point be...? Kind regardsAirVPN Support Team Quote Hide OpenSourcerer's signature Hide all signatures » I am not an AirVPN team member. All opinions are my own and are not to be considered official. Only the AirVPN Staff account should be viewed as such. » The forums is a place where you can ask questions to the community. You are not entitled to guaranteed answer times. Answer quality may vary, too. If you need professional support, please create tickets. » If you're new, take some time to read LZ1's New User Guide to AirVPN. On questions, use the search function first. On errors, search for the error message instead. » If you choose to create a new thread, keep in mind that we don't know your setup. Give info about it. Never forget the OpenVPN logs or, for Eddie, the support file (Logs > lifebelt icon). » The community kindly asks you to not set up Tor exit relays when connected to AirVPN. Their IP addresses are subject to restrictions and these are relayed to all users of the affected servers. » Furthermore, I propose that your paranoia is to be destroyed. If you overdo privacy, chances are you will be unique amond the mass again. Share this post Link to post
Not connected, Your IP: 3.238.7.202
Online: 16581 users - 79855 Mbit/s total BW