1994-11-20 - Re: PGP .DLL

Header Data

From: Jonathan Cooper <entropy@IntNet.net>
To: “David A. Wagner” <dawagner@phoenix.Princeton.EDU>
Message Hash: b0df25f113ccc054fb467b3acd81b47d55362c7151abf8dece798159dafe77b7
Message ID: <Pine.SV4.3.91.941120153320.22175B-100000@xcalibur>
Reply To: <9411170415.AA08055@tucson.Princeton.EDU>
UTC Datetime: 1994-11-20 20:45:50 UTC
Raw Date: Sun, 20 Nov 94 12:45:50 PST

Raw message

From: Jonathan Cooper <entropy@IntNet.net>
Date: Sun, 20 Nov 94 12:45:50 PST
To: "David A. Wagner" <dawagner@phoenix.Princeton.EDU>
Subject: Re: PGP .DLL
In-Reply-To: <9411170415.AA08055@tucson.Princeton.EDU>
Message-ID: <Pine.SV4.3.91.941120153320.22175B-100000@xcalibur>
MIME-Version: 1.0
Content-Type: text/plain


> How do you plan to prevent passwords, plaintext, etc. being saved
> in swap files, etc.?

   Munge the memory where they've been stored.  There is really no way to 
protect absolutely, especially on something as unsecure as a PC where 
someone malevolent could just install a keyboard logger...

   It comes down to a "how-much-is-enough" question.

-jon
( --------[ Jonathan D. Cooper ]--------[ entropy@intnet.net ]-------- )
( PGP 2.6.2 keyprint: 31 50 8F 82 B9 79 ED C4  5B 12 A0 35 E0 9B C0 01 )





Thread