cl_consoleHistory stores passwords in q3config.cfg

Tim Angus tim at ngus.net
Sat Mar 31 14:53:23 EDT 2007


On Sat, 31 Mar 2007 14:28:47 -0400 un wrote:
> A lot of users aren't aware their q3config.cfg has the passwords.  To
> them it's a file generated by quake that they don't worry about.

A system specific generated file should not be being sent to anyone
else. It's better to write config files separately for things like
scripts or specific sets of key bindings.

Regardless, the password systems in Q3 are hardly a pantheon of
security. Passwords are input and broadcast in cleartext, they really
don't hold very much value. Therefore it's really pretty questionable
whether implementing special cases is sensible where it is only to
protect information that is already insecure.




More information about the quake3 mailing list