Re: Mutt & tmp files
martin f krafft wrote:
>
> * Craig Dickson <crdic@yahoo.com> [2001.11.15 10:28:33-0800]:
> > Also note that root owns sendmail, or whatever MTA you're using. If he
> > really wants to read your mail, it would be much easier for him to do it
> > by configuring the MTA to silently copy him on all your messages, so all
> > this concern about temporary files and de-allocated disk sectors seems a
> > bit silly to me.
>
> except he's GPG encrypting, which then even root can't read...
>
> > Your mail can also be spied on by packet sniffers or a compromise of the
> > mail servers of your correspondents.
>
> ditto...
Bzzzz... Wrong.
If you don't trust root, your hosed. Root can change the app so he
has your keys... Root can also change the tty drivers so they are
all silently logged. There is no way to secure it fully unless you
type it in encrypted form. At some point you have to decide you've
done enough and run with it.
--
| Bryan Andersen | bryan@visi.com | http://www.nerdvest.com |
| Buzzwords are like annoying little flies that deserve to be swatted. |
| -Bryan Andersen |
Reply to: