The file
~.gnome2/f-spot/Accounts.xml seems to contain info on Web Gallery
accounts. The file includes passwords in clear text, and its file
permissions are 644. This allows anyone to read the file. Ideally this file should be encrypted, but in the meantime, could its permissions be made 600 so only the owner can read/write it? --
Steve |