3 ms·
A couple of thoughts on security: How I understand this, when the /keybase VFS is mounted, all the files are accessible in clear from the user's point of view.
by zimbatm 9y ago
A couple of thoughts on security:
How I understand this, when the /keybase VFS is mounted, all the files are accessible in clear from the user's point of view. It means that file traversal attacks (eg: browser) could potentially access these files without having the user's computer fully compromised.
Another issue is that most text editors aren't designed to handle sensitive data and thus tend to copy (eg: undo) buffers to various locations on the disk. It's quite probably that when editing the files, a copy is created somewhere else in the user's home which might not be encrypted.
- Bluestrike2 9y agoSetting aside the question of directory traversal, you can configure your text editor to be a bit more private. With vim, you can use autocommands for dealing with encrypted files, those in a certain directory (such as /keybase), etc.[0] In general though, whole disk encryption should deal with random copies, swap files, and the like. 0. https://vi.stackexchange.com/questions/6177/the-simplest-way-to-start-vim-in-private-mode?lq=1 https://vi.stackexchange.com/questions/6177/the-simplest-way...