Re: I "might" have found a bug on 8.2.1 win32

From: Magnus Hagander <magnus(at)hagander(dot)net>
To: Dave Page <dpage(at)postgresql(dot)org>
Cc: Tony Caduto <tony_caduto(at)amsoftwaredesign(dot)com>, Pgsql-general(at)postgresql(dot)org
Subject: Re: I "might" have found a bug on 8.2.1 win32
Date: 2007-02-01 23:11:56
Message-ID: 20070201231156.GB18987@svr2.hagander.net
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

On Thu, Feb 01, 2007 at 09:53:26PM -0000, Dave Page wrote:
> > Not to mention that the whole pgpass thing is a huge security hole, it
> > would be different if the passwords where encrypted or hashed, but they
> > are just sitting there in plain text.
>
> In an 0600 file on *nix, or in your profile on Windows, which if you were concerned with security would be secured as well.

Not to mention it's secured by default, and you'd actually have to go
out of your way to make it *unsecure*.

(Yes, one common way to make it unsecure is to make every local user an
administrator is a comon way to break it, but if you do that you have so
many other ways ot hack that system it doesn' tmake a real difference)

//Magnus

In response to

Browse pgsql-general by date

  From Date Subject
Next Message Magnus Hagander 2007-02-01 23:15:45 Re: I "might" have found a bug on 8.2.1 win32
Previous Message Scott Marlowe 2007-02-01 23:11:44 Re: Production systems beware: U.S. Daylight Savings Time comes at a new time this year