2 comments

[ 12.2 ms ] story [ 43.5 ms ] thread
> Passwords

> (…)

> Impact: An attacker in a privileged network position may be able to alter network traffic

> Description: This issue was addressed by using HTTPS when sending information over the network.

What the heck? I’m really curious about that security flaw. Passwords is a new app (extracted from an also recent pane in System Settings). Why (and what) was it doing anything over the network without HTTPS?