Eugene Zhukov <jevgeni...@gmail.com> writes:
> Would anyone be interested in sponsoring its client package:
> https://bugs.debian.org/780096

Some comments:

1) does dy.fi really require you to send the password in an unencrypted
HTTP request?

2) Does the service really need to run as root?

3) Doesn't

db_get dyfi/password
sed -i "s/^Password.*/Password $RET/" /etc/dyfi-update.conf

in debian/postinst let all local users to see the password if they type
"ps axuf" at the right moment?


-- 
To UNSUBSCRIBE, email to debian-wnpp-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/84mw2ztzso....@sauna.l.org

Reply via email to