On 15.01.2012 21:42, Josh Triplett wrote: > On Sun, Jan 15, 2012 at 09:26:39PM +0100, Michael Biebl wrote: >> severity 655972 important >> thanks >> >> On 15.01.2012 14:49, Josh Triplett wrote: >>> >>> Note that creating a network using WEP results in a WEP-"secured" >>> network, rather than an unsecured network. This issue only seems to >>> happen when attempting to create a WPA network. >> >> Given that this particular feature (to create a WPA secured accesspoint) >> is not that often used > > Given that WEP provides almost no security at all, you're suggesting > that wanting a secure wireless network does not represent the common > case?
No, what I meant is that the majority of users never use NM to create an Ad-Hoc wireless network. The common usage of NM is to connect to infrastructure wireless networks. >> and that an open wireless AP does not imply that >> the users data is accessible, > > An open wireless AP where the user expected a secured one (and where the > UI claims they have one) can lead to revealed user data in several > different ways. > >> I'm downgrading the severity to important >> as imho this reflects more appropriately the severity of this bug. > > Might I suggest instead marking it as grave due to the security > implications but marking it as present in both testing and unstable so > it doesn't affect propagation to testing? As the current version in unstable is also in testing, testing propagation is not affected by this bug anyway. -- Why is it that all of the instruments seeking intelligent life in the universe are pointed away from Earth?
signature.asc
Description: OpenPGP digital signature