Fund Manager
PORTFOLIO MANAGEMENT SOFTWARE
Contact Us

Passwords Stored in Clear Text

Comments, critical feedback, praise, or suggestions for new features.

Postby data8504 » Tue Jul 01, 2008 11:25 pm

The title says it all.

I edited the .mm4 file, and to my utter astonishment, my provider, username, and password were _all_ there, for all to see.

This is absolutely unacceptable, as far as I am concerned. This really should be resolved in a patch _pronto_, and I've rather taken back that no one's pointed it out before.

What gives?

-Matt
data8504
 
Posts: 39
Joined: Sat Dec 08, 2007 11:09 pm

Postby Mark » Wed Jul 02, 2008 9:02 am

Hi Matt,

Yes, this info is not currently encrypted in the .mm4 file. It will be in our next release. You may leave your password empty, and FM will prompt you for it before each retrieve, and not store it in your .mm4 file.
Thanks,
Mark
Fund Manager - Portfolio Management Software
Mark
Site Admin
 
Posts: 11313
Joined: Thu Oct 25, 2007 2:24 pm
Location: Chandler, AZ


Return to Feedback

Who is online

Users browsing this forum: No registered users and 32 guests

FundManagerSoftware.com | Search | Site Map | About Us | Privacy Policy
Copyright © 1993-2024 Beiley Software, Inc. All rights reserved.