Encrypted diary content shown in terminal output as plain text
Bug #1665744 reported by
ryukun
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Lifeograph |
Fix Released
|
Low
|
Unassigned |
Bug Description
When opening an encrypted diary tag names in the diary are shown in the terminal output as plain text.
When you edit one, chapter names, tag names, entry text, apparently all your keystrokes are shown in the terminal output as plain text.
This is a security issue for both encrypted and unencrypted diaries as terminal output can be logged by the user or by third parties.
description: | updated |
description: | updated |
Changed in lifeograph: | |
milestone: | none → 1.4.2 |
Changed in lifeograph: | |
status: | Fix Committed → Fix Released |
To post a comment you must log in.
Normally this kind of information is only shown in DEBUG builds. There was a small issue in a relatively recent update that resulted in some debug info being always shown. Taken care of in https:/ /git.launchpad. net/~lifeograph -core/lifeograp h/commit/ ?id=48df11e9963 ca88461147d7cc3 aa25b6556112f1