From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Newsgroups: gmane.emacs.help Subject: Re: Password prompt inside Emacs with epg-gpg-program -> "gpg2"? Date: Tue, 9 Feb 2016 09:58:34 +0100 Message-ID: <20160209085834.GA27712@tuxteam.de> References: <87h9hjxnwc.fsf@web.de> <87bn7rnsqc.fsf@iki.fi> <874mdjxlcx.fsf@web.de> <874mdj2l2x.fsf@joakim-desk.jockej.lan> <871t8nozpf.fsf@web.de> <87y4av1209.fsf@joakim-desk.jockej.lan> <87k2mfrpy2.fsf@web.de> <87twlj10n9.fsf@joakim-desk.jockej.lan> <87egcnrlsj.fsf@web.de> <8737t2l044.fsf@joakim-desk.jockej.lan> NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8; x-action=pgp-signed X-Trace: ger.gmane.org 1455010424 28772 80.91.229.3 (9 Feb 2016 09:33:44 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Tue, 9 Feb 2016 09:33:44 +0000 (UTC) Cc: help-gnu-emacs@gnu.org To: Joakim Jalap Original-X-From: help-gnu-emacs-bounces+geh-help-gnu-emacs=m.gmane.org@gnu.org Tue Feb 09 10:33:35 2016 Return-path: Envelope-to: geh-help-gnu-emacs@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1aT4ft-0005Ex-VC for geh-help-gnu-emacs@m.gmane.org; Tue, 09 Feb 2016 10:33:34 +0100 Original-Received: from localhost ([::1]:53565 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1aT4ft-0000Ty-5B for geh-help-gnu-emacs@m.gmane.org; Tue, 09 Feb 2016 04:33:33 -0500 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:52950) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1aT4fi-0000T5-IY for help-gnu-emacs@gnu.org; Tue, 09 Feb 2016 04:33:23 -0500 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1aT4fe-0004m4-Fi for help-gnu-emacs@gnu.org; Tue, 09 Feb 2016 04:33:22 -0500 Original-Received: from mail.tuxteam.de ([5.199.139.25]:34300 helo=tomasium.tuxteam.de) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1aT4fe-0004lj-AM for help-gnu-emacs@gnu.org; Tue, 09 Feb 2016 04:33:18 -0500 Original-Received: from tomas by tomasium.tuxteam.de with local (Exim 4.80) (envelope-from ) id 1aT482-0007H7-LA; Tue, 09 Feb 2016 09:58:34 +0100 In-Reply-To: <8737t2l044.fsf@joakim-desk.jockej.lan> User-Agent: Mutt/1.5.21 (2010-09-15) X-detected-operating-system: by eggs.gnu.org: GNU/Linux 3.x X-Received-From: 5.199.139.25 X-BeenThere: help-gnu-emacs@gnu.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: Users list for the GNU Emacs text editor List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: help-gnu-emacs-bounces+geh-help-gnu-emacs=m.gmane.org@gnu.org Original-Sender: help-gnu-emacs-bounces+geh-help-gnu-emacs=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.help:109072 Archived-At: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Tue, Feb 09, 2016 at 10:11:07AM +0100, Joakim Jalap wrote: > Michael Heerdegen writes: > > > Dunno. Maybe it's easy to extract a password for an encrypted file > > from the swap partition if it is included there. > > Well, that depends on your definition of easy :) First of all it would > require you to know that there is such a thing as a swap partition. I > think that rules out about 99% of the people who might find my laptop on > a train :) > > But I totally understand if you want more security than that, > personally I just think that anyone with that level of sofistication > (can dump a swap partition and analyze it to get my password) will be > able to hack me anyway, if they wanted to. If that's your threat model, I'd rather recommend using encrypted file systems (yes, swap too). Don't lose a "running" laptop. (yes, a bit off-topic, but as a reminder that to have some grip on those things you have to try to develop threat models you care about, otherwise it's just waving hands: necessary at the beginning, but not yet the point at which you should rush to implement stuff). - -- t -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iEYEARECAAYFAla5qjoACgkQBcgs9XrR2kbR8wCeNujIol3Zng48OS6LXQuLUeuY lNMAnjKk1WUX3NZpwKRRDF8gmfxeOyqJ =PSvg -----END PGP SIGNATURE-----