Loading Profile...
Passwords to RescueTime is in plain-text in user.config
Noticed that user.config in:
C:\Documents and Settings\<username>\Local Settings\Application Data\RescueTime.com\RescueTime.exe_Url_iqitukdlg04szbe4dffie0b1txso3v3b\1.0.5.20 contains email_address and password in plain-text.
It doesn't bother me - I'm the sole user of this system but if computer is used by more than one operator this seems like a dubious practice.
Comments?
</username>
C:\Documents and Settings\<username>\Local Settings\Application Data\RescueTime.com\RescueTime.exe_Url_iqitukdlg04szbe4dffie0b1txso3v3b\1.0.5.20 contains email_address and password in plain-text.
It doesn't bother me - I'm the sole user of this system but if computer is used by more than one operator this seems like a dubious practice.
Comments?
</username>
I’m uneasy
Follow this discussion to get notifications on your dashboard.
-
Inappropriate?That's a good point. One of those "we should fix this eventually" things from our early that we should have fixed before now. We're a pretty small team, so (sadly) we have no shortage of those. Thanks for the nag! :-)
I’m thankful
EMPLOYEE