[sldev] RFC: design proposal for VWR-1071

[Aimee Trescothick]

On 15 Jul 2009, at 03:39, Melinda Green wrote:

> Aimee Trescothick wrote:
>>
>>
>> There's already a patch to do this attached to VWR-6891 <http://jira.secondlife.com/browse/VWR-6891 
>> >. It was made for V1.21 but just needs a couple of minor changes  
>> to apply to the current code base if I remember rightly.
>
> That patch doesn't deal with the main password-related issues which  
> in my mind is what's needed to make it more valuable than simple  
> auto-completion for the name parts. Your own comments near the  
> bottom of that task begin to get into some detail on this key issue.  
> I don't have any opinion on where munged passwords should be stored,  
> but not including password support would seem to me to make it only  
> useful to users who use the same password for most or all accounts.

Absolutely, I was just suggesting that it's probably better to start  
from that working patch and add in the password storing rather than  
reinvent the wheel again, the only reason that wasn't done at the time  
was that the password code was being worked on in another branch so  
was better to let it settle first. I've attached a freshened patch to  
VWR-6891 which will apply cleanly to Snowglobe. It's unfortunate the  
issues hadn't previously been linked up as duplicates.

Also note that the password at the moment is stored in a separate file  
hashed with the MAC address to prevent people stealing the password by  
simply copying the file and using it on another machine, as it becomes  
useless without the original MAC address as well. I would rather see  
the password file stay as a separate file with just the passwords in.

Aimee.