4 ms·
> Yes, guess what is written in the pin.xml file? The pin we had to set during the setup of Knox in cleartext! Good lord. That's brutal..
by JTon 12y ago
> Yes, guess what is written in the pin.xml file? The pin we had to set during the setup of Knox in cleartext!
Good lord. That's brutal..
- drdaeman 12y agoNot really brutal. It's a PIN code, not a passphrase. Unless those are used with HSMs (like with bank or SIM cards), their only use is to prevent immediate access by non-technical adversary, so there's little point in securing those beyond typical UNIX filesystem permissions (given you're not supposed to have root access or access raw block device, huh).