Bug 166118

Summary: when a reminder is shown no kwallet password is asked
Product: [Applications] korgac Reporter: Dario Panico <dariopnc>
Component: generalAssignee: kdepim bugs <kdepim-bugs>
Status: RESOLVED UNMAINTAINED    
Severity: normal CC: grundleborg, lemma, winter
Priority: NOR Keywords: triaged
Version: unspecified   
Target Milestone: ---   
Platform: unspecified   
OS: Linux   
Latest Commit: Version Fixed In:

Description Dario Panico 2008-07-09 09:50:30 UTC 
Version:           sconosciuto (using 4.00.85 (KDE 4.0.85 (KDE 4.1 >= 20080703)), compiled sources)
Compiler:          gcc
OS:                Linux (x86_64) release 2.6.24-19-generic

It happened two times: a birthday reminder pops-up after kontact start, i select Dismiss and then my e-mails are downloaded without asking my account password (stored in kwallet). This way anyone could easily check my e-mails and steal data.
Comment 1 Michael Leupold 2008-07-10 00:34:33 UTC 
There must be something more to it. It is impossible to open the wallet without the password as that password is used to decrypt the previously encrypted wallet file. Maybe the wallet was already open by some other application when you clicked the dismiss button?
Comment 2 Dario Panico 2008-07-10 11:37:02 UTC 
no, kwallet was not open otherwise this behaviour would have been the correct one.
I set passwords in kmail anyway and then, when asked (the first time) i re-typed them to store in kwallet.
It's like kontact didn't check for password and goes straight with passwords stored in its config files
Comment 3 Michael Leupold 2008-07-16 11:12:18 UTC 
Oh yeah, that's quite possible of course. Judging from your description I assumed the passwords were only stored in the wallet so that's where I took the wrong turn.
Comment 4 Allen Winter 2013-09-21 21:18:25 UTC 
Dario,

Is this bug still around in modern KDE 4.11 versions?
Comment 5 Dario Panico 2013-09-22 15:43:40 UTC 
(In reply to comment #4)
> Dario,
> 
> Is this bug still around in modern KDE 4.11 versions?

I can't say, I'm not using KDE anymore :(