From 3eafbb26d1bbc23e38f9d924cfdf6e1670caefb2 Mon Sep 17 00:00:00 2001 From: Ed Page Date: Mon, 13 Apr 2009 21:19:44 -0500 Subject: [PATCH] Obscuring credentials even further (Note: This is not meant to make them completely hidden but to make them non-obvious when just browsing files, anyone who looks at the source code would know how to retrieve the passwords) --- src/gtk_rtmilk.py | 20 ++++++++++++-------- 1 file changed, 12 insertions(+), 8 deletions(-) diff --git a/src/gtk_rtmilk.py b/src/gtk_rtmilk.py index bab46aa..2a0b39b 100644 --- a/src/gtk_rtmilk.py +++ b/src/gtk_rtmilk.py @@ -151,20 +151,24 @@ class GtkRtMilk(object): """ @note Thread Agnostic """ - username = config.get(self.name(), "username") - password = None - blobbedToken = config.get(self.name(), "bin_blob") - token = base64.b64decode(blobbedToken) - self._credentials = username, password, token + blobs = ( + config.get(self.name(), "bin_blob_%i" % i) + for i in xrange(len(self._credentials)) + ) + creds = ( + base64.b64decode(blob) + for blob in blobs + ) + self._credentials = tuple(creds) def save_settings(self, config): """ @note Thread Agnostic """ config.add_section(self.name()) - config.set(self.name(), "username", self._credentials[0]) - blobbedToken = base64.b64encode(self._credentials[2]) - config.set(self.name(), "bin_blob", blobbedToken) + for i, value in enumerate(self._credentials): + blob = base64.b64encode(value) + config.set(self.name(), "bin_blob_%i" % i, blob) def login(self): """ -- 1.7.9.5