encrypted sites.dat - password & cached memory

loopex · 04-02-2007, 01:01 AM

Quote:

Originally Posted by MxxCon

i wouldn't want to loose all of my data because of some bug in his implementation.

a genuine alpha/beta tester should help the coder to find any bug and report it so it can be fixed...
before a public release is made, not to be afraid for loose all data bcoz of a bug in his implementation??
The answer is full "backup" before you test any new beta releases... or you should go for the Gold version.

Thanks

DayCuts · 04-02-2007, 09:02 AM

Quote:

Originally Posted by loopex

The answer is full "backup" before you test any new beta releases

So, do you backup your entire system before each and every program you install?

If it is that much of a concern to you that the unencrypted (if it is so) sites.dat that is kept in memory when flashfxp is started could be sniffed or detected by a virus/trojan/whatever, and/or found on your drive because it was no wiped several times with psuedorandom data before, then my suggestion to you would be to remember the information and enter it manually.

Im all for security improvements if they are reasonable to implement, but your claim that non-psuedorandom data removal etc are security holes is rediculas. How many other programs out there do you know that have such features.

loopex · 04-02-2007, 12:34 PM

no, not for every program i install.
Raid-1 and entire system backup over the network with 'disk imaging software' every second week...

but the line you quote in your post was meant for MxxCon, if you scroll up a little bit then you can read
what MxxCon just Said "how to securely delete/rewrite files" and that he wouldn't want to loose
data bcoz of some bug in his implementation. if MxxCon is so afraid to loose data? then he should
do full system backup before testing new alpha/beta release.

Thanks

MxxCon · 04-02-2007, 01:40 PM

Quote:

Originally Posted by loopex

if MxxCon is so afraid to loose data? then he should do full system backup before testing new alpha/beta release.

i would probably have to if bigstar will decide to implement his own 'secure-delete' implementation.