Package: beep-media-player-scrobbler Version: 0.3.8.1-4 Severity: normal I've just discover that my last.fm username and password stored in ~/bmp/config file, which has 0644 permissions.
So, my last.fm login and password's md5 hash word readable. -- System Information: Debian Release: 3.1 APT prefers testing APT policy: (200, 'testing') Architecture: i386 (i686) Kernel: Linux 2.6.18-3-k7 Locale: LANG=ru_RU.UTF-8, LC_CTYPE=ru_RU.UTF-8 (charmap=UTF-8) Versions of packages beep-media-player-scrobbler depends on: ii beep-media-player 0.9.7-1 Versatile audio player that suppor ii libc6 2.3.2.ds1-22sarge3 GNU C Library: Shared libraries an ii libcurl3 7.13.2-2sarge5 Multi-protocol file transfer libra ii libidn11 0.5.13-1.0 GNU libidn library, implementation ii libmusicbrainz4 2.1.1-3sarge1 Second generation incarnation of t ii libssl0.9.7 0.9.7e-3sarge4 SSL shared libraries ii libstdc++5 1:3.3.5-13 The GNU Standard C++ Library v3 ii zlib1g 1:1.2.2-4.sarge.2 compression library - runtime -- no debconf information -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]