BlogBuddy v0.4 gets the FTP password for the
destination site from the user's Blogger.com template.
The user can't simply enter it on the spot. This means
that the password has to be stored in the template,
and is therefore exposed to any security problems
This problem was highlighted when Blogger.com was
cracked over the Christmas holiday. I love BlogBuddy,
but won't use it or recommend that anyone else use it
until this issue is fixed.
Log in to post a comment.