Re: [ppa-dev] OCF: Security Problem

[Christopher Kings-L. <ch...@fa...>]

How on earth do you expect me to fix it?  It's your _browser_ storing 
the username and password.

It's the same for any site on the web.

Chris

> If for example you login at the PPA login screen, but it fails because 
> the PG server is down. You leave the terminal to go start the PG server 
> (for some reason, you can't do it from the same terminal). While you are 
> gone, someone hits the browser refresh. They are logged in while you are 
> away and have access to the PG server. It would be a hand-hold to fix 
> it, but probably worth it considering how easy it would be.