Trello Desktop Application Stores Authentication Token in Plain Text

Re:Trello Desktop Application Stores Authentication Token in... by outworlder on Wednesday July 03, 2019 @03:24PM (#20347757)

Isn't this a case of

"It rather involved being on the other side of this airtight hatchway" ?

https://devblogs.microsoft.com/oldnewthing/20060508-22/?p=31...

[ Parent | on HN ]

Re:Trello Desktop Application Stores Authentication Token in... by stingraycharles on Wednesday July 03, 2019 @04:07PM (#20348225)

Exactly. It reminds me of that PostgreSQL CVE issue recently discussed, where the security breach was that someone with admin privileges on a PostgreSQL instance could execute code as the postgres user.

People fail to consider the threat model in some of these cases.

https://news.ycombinator.com/item?id=19659684

[ Parent | on HN ]