Title: security risk: password authentication is not enabled by default · Issue #1062 · coder/code-server · GitHub
Open Graph Title: security risk: password authentication is not enabled by default · Issue #1062 · coder/code-server
X Title: security risk: password authentication is not enabled by default · Issue #1062 · coder/code-server
Description: Recently downloaded version 2.1523-vsc1.38.1 to try out. From reading the docs I saw there is some form of password auth 👍. After running code-server, the logs state No authentication 👎 This can be a huge security issue for someone who d...
Open Graph Description: Recently downloaded version 2.1523-vsc1.38.1 to try out. From reading the docs I saw there is some form of password auth 👍. After running code-server, the logs state No authentication 👎 This can be...
X Description: Recently downloaded version 2.1523-vsc1.38.1 to try out. From reading the docs I saw there is some form of password auth 👍. After running code-server, the logs state No authentication 👎 This can be...
Opengraph URL: https://github.com/coder/code-server/issues/1062
X: @github
Domain: github.com
{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"security risk: password authentication is not enabled by default","articleBody":"Recently downloaded version 2.1523-vsc1.38.1 to try out. From reading the docs I saw there is some form of password auth 👍. After running code-server, the logs state `No authentication` 👎 \r\n \r\nThis can be a huge security issue for someone who does not understand what they are doing. Password authentication should be enabled by default and disabled via param or environment variable. \r\n\r\nI'll spare you the doomsday scenarios that I have been dreaming up for the past hour. I just want to see the internet a little more secure than it has been.","author":{"url":"https://github.com/natefanaro","@type":"Person","name":"natefanaro"},"datePublished":"2019-10-08T02:39:42.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":12},"url":"https://github.com/1062/code-server/issues/1062"}| route-pattern | /_view_fragments/issues/show/:user_id/:repository/:id/issue_layout(.:format) |
| route-controller | voltron_issues_fragments |
| route-action | issue_layout |
| fetch-nonce | v2:20e6514a-b085-9f4f-18d5-9d13dd975bc7 |
| current-catalog-service-hash | 81bb79d38c15960b92d99bca9288a9108c7a47b18f2423d0f6438c5b7bcd2114 |
| request-id | 9804:18C7E2:4453A9:5AE3BD:6A52F294 |
| html-safe-nonce | 4757fcfe881b54c8ad1b2857d8bdeb6c538693d4cf575bce108a6b2ff8dbb129 |
| visitor-payload | eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiI5ODA0OjE4QzdFMjo0NDUzQTk6NUFFM0JEOjZBNTJGMjk0IiwidmlzaXRvcl9pZCI6IjI2ODYxMTE1NDI3MTAzMDEzMzIiLCJyZWdpb25fZWRnZSI6ImlhZCIsInJlZ2lvbl9yZW5kZXIiOiJpYWQifQ== |
| visitor-hmac | deeec07d6bce9e93eda8d9d9c9f8b733ad599509727582ef7fe5b7dd9c431887 |
| hovercard-subject-tag | issue:503790241 |
| github-keyboard-shortcuts | repository,issues,copilot |
| google-site-verification | Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I |
| octolytics-url | https://collector.github.com/github/collect |
| analytics-location | / |
| fb:app_id | 1401488693436528 |
| apple-itunes-app | app-id=1477376905, app-argument=https://github.com/_view_fragments/issues/show/coder/code-server/1062/issue_layout |
| twitter:image | https://opengraph.githubassets.com/7b608f45facce6b00c122325c2a1697665268e2d8ce73ac7675eeb72cae9de65/coder/code-server/issues/1062 |
| twitter:card | summary_large_image |
| og:image | https://opengraph.githubassets.com/7b608f45facce6b00c122325c2a1697665268e2d8ce73ac7675eeb72cae9de65/coder/code-server/issues/1062 |
| og:image:alt | Recently downloaded version 2.1523-vsc1.38.1 to try out. From reading the docs I saw there is some form of password auth 👍. After running code-server, the logs state No authentication 👎 This can be... |
| og:image:width | 1200 |
| og:image:height | 600 |
| og:site_name | GitHub |
| og:type | object |
| og:author:username | natefanaro |
| hostname | github.com |
| expected-hostname | github.com |
| None | b9a586c06a05a7a86fc7e3f4dbd03e42f6869085879aa184aa6369456dbd50fb |
| turbo-cache-control | no-preview |
| go-import | github.com/coder/code-server git https://github.com/coder/code-server.git |
| octolytics-dimension-user_id | 95932066 |
| octolytics-dimension-user_login | coder |
| octolytics-dimension-repository_id | 172953845 |
| octolytics-dimension-repository_nwo | coder/code-server |
| octolytics-dimension-repository_public | true |
| octolytics-dimension-repository_is_fork | false |
| octolytics-dimension-repository_network_root_id | 172953845 |
| octolytics-dimension-repository_network_root_nwo | coder/code-server |
| turbo-body-classes | logged-out env-production page-responsive |
| disable-turbo | false |
| browser-stats-url | https://api.github.com/_private/browser/stats |
| browser-errors-url | https://api.github.com/_private/browser/errors |
| release | 07a982c1d40157c619b364352b704c3ce66bb332 |
| ui-target | full |
| theme-color | #1e2327 |
| color-scheme | light dark |
Links:
Viewport: width=device-width