Jump to content
Not connected, Your IP: 3.214.184.250
unit13

Suggestion: Hash saved login info (AirVPN.xml)

Recommended Posts

Eddie client saves login and password information in AirVPN.xml as cleartext!

 

I am suggesting this information be hashed when saved, if possible.

 

<?xml version="1.0" encoding="utf-8"?>
<eddie>
  <options>
    <option name="login" value="your-saved-email-address@sample-email-address.com" />
    <option name="password" value="your-AirVPN-password-in-cleartext" />
    <option name="remember" value="True" />

...

 

Share this post


Link to post

Maybe I'm not thinking of every possible situation but if a malicious somebody has access to that xml file then it's already over for you - they've gained access to your machine.   My VPN username and password would be way down the list of worries. 

Share this post


Link to post

 

Hi!

 

Referencing Windows version.

I just noticed: Why is the AirVPN password in the AirVPN.xml saved in plain text. Is there a chance to save it hashed, at least?

 

 

Regards, giga

 

Hello!

 

No, that's not planned at the moment. To save it encrypted in a safe way you should enter a master password (like you do with browsers) that is not stored anywhere, so it would be totally identical to as it is now when you don't keep "Remember" ticked. Different methods can be invented and made secure regardless of client program source code exposure but what would the point be...?

 

Kind regards

AirVPN Support Team


Four simple things:
There's a guide to AirVPN. Before you ask questions, take 30 minutes of your time to go through it.

Amazon IPs are not dangerous here. It's the fallback DNS.
Running TOR exits is discouraged. They're subject to restrictions on the internet and harm all AirVPN users.

Furthermore, I propose that your paranoia is to be destroyed. If you overdo privacy, you'll be unique among the mass again.

 

XMPP: gigan3rd@xmpp.airvpn.org or join our lounge@conference.xmpp.airvpn.org

Share this post


Link to post

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...
  • Security Check
    Play CAPTCHA Audio
    Refresh Image

×
×
  • Create New...