Topic: Troubleshooting and Bug Reports / Security hole: All user passwords are visible in source

I just encountered that all passwords of all basecamp users per one account can be seen by people that have been given “admin” status. All they have to do is visit the source code of the page. This means, the passwords have to be stored in clear text in the basecamp DB.

I think this is a severe security hole. Given the fact that most users have one or only a very few passwords for web use, it is likely that an admin user can poke them all out and seek access to other services the are using. Can you please urgently close this problem?

Topic: Feature Requests / Time tracking on collaborative client projects

Dear All,
the most time consuming and annoying task for me is moving all people that work in a specific project to my “own company” just to allow them to track time. And back afterwards, when the project is over.

Please, please, please!! Allow time tracking as a switch for all members of a project. It could be so easy. Time tracking could be something that could be allowed like adding milestones or todos. Why does it have to be so hard to effectively use ist?

I have a small company but work with a dozen other small companys on big projects. All of them are in my Basecamp but we never can keep track of the time spent by the project as a whole.

Please think of it.
And: many thanks to making moving between companys possible. That helps a lot.

Topic: System Announcements / NEW FEATURE: Milestone calendar date picker (UPDATED)

This is a two sided improvement.
It’s very useful to pick the right date. Wonderful. Much better than before.
On the other hand you (maybe without intention) removed the tiny calendars on the right column an so you’ve got no means to look for maybe the next month or your previous or upcoming milestones. So you are left alone, if you like to put a milestone say in between two existing ones.

Can’t you provide the tiny calendars with the yellow marked dates like on the main milestones page? That would make the point. Otherwise I have to pick a date in my mind before clicking in “new milestone” and enter that date in the new (wonderful) calendar. But then it’s no help in comparison to beforehand…

Thanks for your continuous work!

Topic: System Announcements / NEW FEATURE: Image thumbnails for messages and comments

Uh. After reading through all of the comments, i discovered the reason why I didn’t expierience the effect before: no thumbnails on external FTP. Bad luck.
Duh. :-(

Topic: System Announcements / NEW FEATURE: Image thumbnails for messages and comments

Very useful!!! Bravo!!!
I found myself very often uploading the files and then pasting into the message body just to be able to show the images in the message. This new feature helps a lot.
Thanks!