Encrypted diary content shown in terminal output as plain text

Bug #1665744 reported by ryukun
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Lifeograph
Fix Released
Low
Unassigned

Bug Description

When opening an encrypted diary tag names in the diary are shown in the terminal output as plain text.

When you edit one, chapter names, tag names, entry text, apparently all your keystrokes are shown in the terminal output as plain text.

This is a security issue for both encrypted and unencrypted diaries as terminal output can be logged by the user or by third parties.

ryukun (ryukun)
description: updated
description: updated
Revision history for this message
Ahmet Öztürk (dmxe) wrote :

Normally this kind of information is only shown in DEBUG builds. There was a small issue in a relatively recent update that resulted in some debug info being always shown. Taken care of in https://git.launchpad.net/~lifeograph-core/lifeograph/commit/?id=48df11e9963ca88461147d7cc3aa25b6556112f1

Changed in lifeograph:
status: New → Fix Committed
importance: Undecided → Low
Ahmet Öztürk (dmxe)
Changed in lifeograph:
milestone: none → 1.4.2
Ahmet Öztürk (dmxe)
Changed in lifeograph:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.