Serious Decryption Privacy Bug?
Reported by friedrich | November 15th, 2012 @ 03:55 PM | in 1.8 (closed)
Hi everybody.
I'm on a Mac, running Snow Leopard 10.6.8:
When decrypting a top secret encrypted textfile via GPGServices,
the whole content of the file is readably shown in Console.app >
system.log.
It says "GPGServices [DEBUG] [STDOUT] ...." followed by the very
sensible content, visible for everybody who knows where to
look.
Is there a way to turn off GPGServices logging??
Best Regards
A very nervous Friedrich
Comments and changes to this ticket
-
Luke Le November 15th, 2012 @ 04:14 PM
Hi Friedrich,
in what version of GPGServices are you seeing this?
Checking the source at the moment and wondering where that log message is generated. -
Luke Le November 15th, 2012 @ 06:21 PM
- State changed from “new” to “fixed”
I've just tested our officialy released version on gpgtools.org and couldn't reproduce the problem.
Also our current nightly didn't expose any encrypted content.Please update to the GPGServices version from https://nightly.gpgtools.org and remove any /var/log/system.log* files.
Please Sign in or create a free account to add a new ticket.
With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.
Create new ticket
Create your profile
Help contribute to this project by taking a few moments to create your personal profile. Create your profile »
friedrich
Luke Le
Mento
steve