Package: beep-media-player-scrobbler
Version: 0.3.8.1-4
Severity: normal

I've just discover that my last.fm username and password stored in ~/bmp/config 
file, which has 0644 permissions.

So, my last.fm login and password's md5 hash word readable.

-- System Information:
Debian Release: 3.1
  APT prefers testing
  APT policy: (200, 'testing')
Architecture: i386 (i686)
Kernel: Linux 2.6.18-3-k7
Locale: LANG=ru_RU.UTF-8, LC_CTYPE=ru_RU.UTF-8 (charmap=UTF-8)

Versions of packages beep-media-player-scrobbler depends on:
ii  beep-media-player     0.9.7-1            Versatile audio player that suppor
ii  libc6                 2.3.2.ds1-22sarge3 GNU C Library: Shared libraries an
ii  libcurl3              7.13.2-2sarge5     Multi-protocol file transfer libra
ii  libidn11              0.5.13-1.0         GNU libidn library, implementation
ii  libmusicbrainz4       2.1.1-3sarge1      Second generation incarnation of t
ii  libssl0.9.7           0.9.7e-3sarge4     SSL shared libraries
ii  libstdc++5            1:3.3.5-13         The GNU Standard C++ Library v3
ii  zlib1g                1:1.2.2-4.sarge.2  compression library - runtime

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to