dsh-napcat-keeper 2.1.0 → 2.1.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +4 -0
- package/lib/client.js +1 -1
- package/package.json +1 -1
package/CHANGELOG.md
CHANGED
package/lib/client.js
CHANGED
|
@@ -257,7 +257,7 @@ window.__ModuleLoader__.load({
|
|
|
257
257
|
|
|
258
258
|
/* ---------- 「记住密码」那一块:先讲风险,再让人自己决定 ---------- */
|
|
259
259
|
const 风险条目 = [
|
|
260
|
-
'
|
|
260
|
+
'密码会以明文写进本机两个地方:~/.dsh/napcat-keeper-config.json,以及插件生成的 napcat-keeper-env.bat。不加密、不做任何变换(MD5 那份是给 NapCat 兜底用的,同样等于密码)。',
|
|
261
261
|
'任何能读你这个用户目录的东西都能直接捡走:同步盘、备份工具、其它软件、远控木马、临时借你电脑的人。',
|
|
262
262
|
'QQ 密码通常和 QQ 邮箱、部分游戏、微信的登录入口共用一套身份,泄漏的影响面不止这一个号。',
|
|
263
263
|
'插件本身不打印密码、/state 接口也只回「存没存」和长度,但那只是少开一个泄漏口,不等于安全。',
|