User avatar
🇨🇦Samuel Proulx🇨🇦 @fastfinge@interfree.ca
3d
FYI if you use the translation addon polyglot: it stores API keys and passwords in nvda.ini in cleartext. If your NVDA log level is anything above info, those values will be written to nvda.log, even if the addon was disabled or removed at the time. I have filed an issue and PR, and am sure this will be fixed shortly. But in the meantime, if you use this addon and have filed any bugs with or with any other addon, and included a copy of nvda.log, you must rotate all API keys and passwords for all of your translation services. github.com/cary-rowen/polyglot/issues/20
4
21
2
0
User avatar
Munchkinbear @munchkinbear@mastodon.stickbear.me
3d
@fastfinge that repo owner needs a smack. upside the head. As soon as I saw them mention DPAPI I was like no, DPAPI is not the way forward, bozo! I don't need to say it though because you did it for me. Some people need to actually research what something is, how it works, etc. if they had, they wouldn't have even mentioned it, but in the grand scheme of things their addon, not yours, or mine, but it doesn't mean we can't bitch a plenty.
1
0
1
0
User avatar
🇨🇦Samuel Proulx🇨🇦 @fastfinge@interfree.ca
3d
@munchkinbear Yup. I need the addon for games though. So if they don’t fix it I’ll have to fork.
1
0
0
0
User avatar
Munchkinbear @munchkinbear@mastodon.stickbear.me
3d
@fastfinge open source, fork that bitch. lol.
3
0
0
0
User avatar
🇨🇦Samuel Proulx🇨🇦 @fastfinge@interfree.ca
1d
@munchkinbear Here it is if you need it. github.com/fastfinge/polyglot-secure/
0
0
0
0