Re: Password prompt inside Emacs with epg-gpg-program -> "gpg2"?

[<tomas@tuxteam.de>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Tue, Feb 09, 2016 at 10:11:07AM +0100, Joakim Jalap wrote:
> Michael Heerdegen <michael_heerdegen@web.de> writes:
> 
> > Dunno.  Maybe it's easy to extract a password for an encrypted file
> > from the swap partition if it is included there.
> 
> Well, that depends on your definition of easy :) First of all it would
> require you to know that there is such a thing as a swap partition. I
> think that rules out about 99% of the people who might find my laptop on
> a train :)
> 
> But I totally understand if you want more security than that,
> personally I just think that anyone with that level of sofistication
> (can dump a swap partition and analyze it to get my password) will be
> able to hack me anyway, if they wanted to.

If that's your threat model, I'd rather recommend using encrypted
file systems (yes, swap too). Don't lose a "running" laptop.

(yes, a bit off-topic, but as a reminder that to have some grip on
those things you have to try to develop threat models you care about,
otherwise it's just waving hands: necessary at the beginning, but
not yet the point at which you should rush to implement stuff).

- -- t
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iEYEARECAAYFAla5qjoACgkQBcgs9XrR2kbR8wCeNujIol3Zng48OS6LXQuLUeuY
lNMAnjKk1WUX3NZpwKRRDF8gmfxeOyqJ
=PSvg
-----END PGP SIGNATURE-----