Hacker Newsnew | past | comments | ask | show | jobs | submitlogin
Alfred Extensions - Remember to check how your credentials are stored
1 point by moystard on Sept 7, 2012 | hide | past | favorite
After installing the Drop In Pocket extension available for Alfred at http://jdfwarrior.tumblr.com/post/21650256216/drop-in-pocket-extension-allows-you-to-quickly, I suddenly wondered how the author was storing my credentials.

It happens that he simply uses an application called Authenticate.app located in the extension folder and a simple command allows you to have access to your username and password:

./Authenticate.app/Contents/MacOS/Authenticate -get username moystard

Replace username by password, and tada, you get the password.

Not saying here that you should not use Alfred extensions, but it is good to be reminded sometimes that something that is initially convenient also leaks your precious credentials to a third party.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: