#4 Password hashes stored world readable

[Anonymous]

The default file permissions on UNIX systems MacOSX
included, allow for anyone to read the entire
configuration directory.

Workaround:

chmod 700 ~/.jbidwatcher
chmod go-rwx ~/.jbidwatcher/*

[Morgan Schweers]

Logged In: YES
user_id=19745

Greetings,
Unfortunately, there's no pure Java way to set these
permissions. It should be creating the file according to
your umask, however, so if that's set appropriately, it
should be fine.

I can add code to do a:
Runtime.getRuntime().exec("chmod og-rwx " + fname);

if it's on a Unix system, but that's a platform specific
feature, so a bit lower priority.

-- Morgan