Am 08.09.20 um 15:21 schrieb Robert J. Hansen:
>> Eventually you'll enter your master password anyway. After that there's
>> no other layer of security. All your passwords, certificates and
>> PGP-keys lie about in memory. So I'm concerned about memory leaks and
>> code injections.
> 
> IMO, the vast majority of users worry far too much about these.

The vast majority doesn't worry about anything they don't understand.
Especially not security or encryption or how shortcuts can help your
carpal tunnel syndrome.

That's why we wrote this stuff into the law[TM] in Europe. ;)


> Point blank: it's all over the moment the bad guy has access to your
> hardware.

Even if that was true, it should by no means lead to the idea that
software security is futile.


(...)
> We were helped by the fact the suspect closed the laptop as the police
> made the arrest.  This meant the suspect's RAM had been swapped to disk
> in a hibernation file, so that when the suspect brought the laptop out
> of hibernation the state of the laptop could be restored.

Keys should not be stored in swappable memory. :-\


_______________________________________________
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Reply via email to