Slashdot Mirror

← Back to Stories (view on slashdot.org)

Gaim 2.0.0beta1 Released

Posted by ryuzaki0 on from the im-because-your-time-is-meaningless dept.

BerkeleyDude writes "Gaim 2.0.0beta1 has been released! Here is the changelog. New features include account status, away messages, etc, UPnP and NAT traversal support, new UI for buddylist, chat windows and preferences."

3 of 383 comments (clear)

  1. Re:and what about the passwords? by Monkelectric · · Score: 5, Informative
    To me, it seems like their stance on not encrypting passwords is a backwards. Having a non-encrypted passwords policy does not make sense to me, as it leaves things wide open.

    Encrypting the passwords would mean the key would have to be stored in the program. The key could be retrieved from the program. This is *EXACTLY* how the DVD encryption was broken. It didnt work there, and its not gonna work here.

    --

    Religion is a gateway psychosis. -- Dave Foley

  2. Re:and what about the passwords? by wfberg · · Score: 5, Informative

    Actually, if you read the page you're linking to, you should really find it makes perfect sense. Either you store the password in such a way that you need user interaction to retrieve it, or you use some sort of obscurity approach which is worse than nothing. As it is, gaim stores it in plain text, yes, but there's nothing to keep you from either not storing the password OR using file-system or file based encryption - which is actually perfectly feasible. If you're using windows XP for example, just right-click the accounts.xml, properties, advanced, encrypt. (The encryption key is linked to your XP login password)

    On the other hand, yes, some sort of OS specific hooks to make this easier would be sensible. For example, using Mac OS's "keychain", or Windows XP's "secure storage".

    Still, even using these built-in encrypted storages only protect against a very very short list of threats.

    Now, if you just stored accounts.xml on a hard-ware level encrypted harddrive that needs a smart-card and a passphrase to work, you'd be getting somewhere..

    --
    SCO employee? Check out the bounty
  3. Re:Idle Time Reporting Option Removed by junk · · Score: 5, Informative

    It's not that you can't hide your idle time, it's that it doesn't allow you to choose what it uses to report idle time. Instead of giving you the report-idle-time-base-on options, it just uses your keyboard/mouse to determine how idle this you are. It used to also allow the option of reporting idle time based on gaim usage only (you could work on your computer all you want and it would consider you idle until you typed into a gaim chat window). If you don't want people to know whether your idle or ignoring them (don't debate it, you know you all use it to ignore people) then don't report your idle time at all. Or use idle maker like that one guy suggested...