Passwords

[KenW]

Don't know if asked before. Are passwords saved in readable format
anyplace ? Like email, servers or accounts.



KenW

[Ralph Fox]

Post by KenW
Don't know if asked before. Are passwords saved in readable format
anyplace ? Like email, servers or accounts.

Your passwords look similar to this in your Agent 8 AGENT.INI file:

<Password>UEFTU1dPUkQK</Password>

The password is scrambled/obfuscated, but it is not encrypted in a
way that would totally prevent anyone else from decoding it. Someone
who got hold of your scrambled password, could put it into their own
copy of Agent and then get Agent to write a data.log file which would
reveal the password.

So don't post your entire AGENT.INI file online. :-)

[KenW]

Thanks

Post by Ralph Fox

Post by KenW
Don't know if asked before. Are passwords saved in readable format
anyplace ? Like email, servers or accounts.

<Password>UEFTU1dPUkQK</Password>
The password is scrambled/obfuscated, but it is not encrypted in a
way that would totally prevent anyone else from decoding it. Someone
who got hold of your scrambled password, could put it into their own
copy of Agent and then get Agent to write a data.log file which would
reveal the password.
So don't post your entire AGENT.INI file online. :-)

KenW

[lisa]

Post by Ralph Fox
The password is scrambled/obfuscated, but it is not encrypted in a
way that would totally prevent anyone else from decoding it. Someone
who got hold of your scrambled password, could put it into their own
copy of Agent and then get Agent to write a data.log file which would
reveal the password.

interesting

I have an agent.log directory with routerlogs (xxx.xml) but I don't
see any unscrambled password information. I forget to write down one
of my email passwords. It's now scrambled and Agent has no problems
getting email from that account, but reading this answer I have hope
it's possible to unscramble that password and figure out what password
I used when I created that account. How could I do that?

[Ralph Fox]

Post by lisa

Post by Ralph Fox
The password is scrambled/obfuscated, but it is not encrypted in a
way that would totally prevent anyone else from decoding it. Someone
who got hold of your scrambled password, could put it into their own
copy of Agent and then get Agent to write a data.log file which would
reveal the password.

interesting
I have an agent.log directory with routerlogs (xxx.xml) but I don't
see any unscrambled password information.

_Not_ the RouterLog-yyyy-mm-dd.xml files in the log directory.

There is a file named “DATA.LOG”, which Agent does not normally create.
For Agent to create it, a setting in the AGENT.INI file is required.
It is the file named “DATA.LOG” which may contain readable passwords.

See this page in the help file:
Help >> Index >> .INI file >> AGENT.INI >> [Debugging] >> LogData=<bool>

Only turn this setting on when you need to, and turn it off afterwards.
You do not want to leave this setting turned on for _two_ reasons:
1) The “DATA.LOG” file can grow enormously and fill up your data folder.
2) The “DATA.LOG” file can reveal your passwords.

Post by lisa
I forget to write down one
of my email passwords. It's now scrambled and Agent has no problems
getting email from that account, but reading this answer I have hope
it's possible to unscramble that password and figure out what password
I used when I created that account. How could I do that?

Follow the steps in part 2 of my reply here:

* Usenet MID link: <URL:news:***@4ax.com>
* Google Groups link: <URL:https://groups.google.com/g/alt.usenet.offline-reader.forte-agent/c/yf4WO_wzEOQ/m/i8i7s6LbAAAJ>
* UsenetArchives link: <URL:https://www.usenetarchives.com/view.php?id=alt.usenet.offline-reader.forte-agent&mid=PGxucmFsY2RzMGllZWduaHE5bm81azlkZG90Y2FrYnMxNGVANGF4LmNvbT4>

[lisa]

There is a file named “DATA.LOG”, which Agent does not normally create.
For Agent to create it, a setting in the AGENT.INI file is required.
It is the file named “DATA.LOG” which may contain readable passwords.
Only turn this setting on when you need to, and turn it off afterwards.
1) The “DATA.LOG” file can grow enormously and fill up your data folder.

yeah, one email request already generate much data.

2) The “DATA.LOG” file can reveal your passwords.

yes, it really does. It was a typo problem.

* Google Groups link: <URL:https://groups.google.com/g/alt.usenet.offline-reader.forte-agent/c/yf4WO_wzEOQ/m/i8i7s6LbAAAJ>
* UsenetArchives link: <URL:https://www.usenetarchives.com/view.php?id=alt.usenet.offline-reader.forte-agent&mid=PGxucmFsY2RzMGllZWduaHE5bm81azlkZG90Y2FrYnMxNGVANGF4LmNvbT4>

only the Google Group link works for me, but one working link is
enough.
Thanks a lot for your great support.
--

A mobile phone is a tool and not a drug.