https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=280915
Bug ID: 280915
Summary: libfetch: Change default FTP password to
anonymous@anonymous
Product: Base System
Version: CURRENT
Hardware: Any
OS: Any
Status: New
Severity: Affects Only Me
Priority: ---
Component: bin
Assignee: b...@freebsd.org
Reporter: mallo...@fastmail.com
Created attachment 252900
--> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=252900&action=edit
libfetch: Change default FTP password to anonymous@anonymous
Current default behavior is to send username@hostname to any FTP server that
asks.
Leaking username and hostname to every FTP server should be opt-in not opt-out.
Users desiring this behavior can set this variable:
```
FTP_PASSWORD=`whoami`@`hostname`
```
You can verify that `fetch(1)` sends username & hostname with the following two
commands:
```
doas pkg install netcat
echo -e '220\n331\n' | netcat -lp 8080
```
```
fetch -vv ftp://localhost:8080
```
See attached patch.
--
You are receiving this mail because:
You are the assignee for the bug.
