CryptopartyApr 20, 2017
Jens Kubieziel
.@hanno found passwords in the bug reports from @owncloud and @nextcloud
!security 
http://qttr.at/1shs
Apr 19, 2017 at 9:09amWeb
Show threadMMN-o ✅⃠Apr 19, 2017
^- @nextclouders @bes Is this something relevant and interesting? Alleged !security issue with passwords from config.php included in bug reports.
Show threadMMN-o ✅⃠Apr 19, 2017
@nextclouders @bes Seems to be all good though: »In all fairness to NextCloud, they had actually started scrubbing data from the existing bug reports, they just hadn't informed me.»
Show threadBjörn SchießleApr 20, 2017
@mmn personally I don't think so. It is bad if people forget to remove passwords, etc before they post a config/log on a forum, mailing list or issue tracker. But it is not a security issue of the software as such.