William H. Geiger III (whgiii@invweb.net)
Fri, 15 May 98 14:24:29 -0500
-----BEGIN PGP SIGNED MESSAGE-----
In <v04003a10b181388c425c@[198.115.179.81]>, on 05/14/98
at 08:38 PM, Vin McLellan <vin@shore.net> said:
>>According to Larry in Tech Support at Security Dynamics, Version 2.0 of
>>>RSA SecurPC fixed this and the password is now stored encrypted,
>>>whereas, yes, in earlier versions it could be located and read.
> Errant nonsense. Larry was misinformed and misinformed you. SDTI and RSA
>have been all over this for days. The swap problem is real. The problem
>is acknowledged as such, and a fix is in the works. Hopefully, any other
>call to SDTI (for whom I'm a dime-a-day consultant) will find someone
>properly informed.
> Eo nomine, humble apologies are offered.
> Everyone I've talked to at SDTI and RSA is taking this very seriously.
>You should not have had to deal with this sort of silliness.
Has anyone actually *confirmed* that this is a swapfile problem or some
other mechanism at work causing the passphrase going to disk?
- --
- ---------------------------------------------------------------
William H. Geiger III http://users.invweb.net/~whgiii
Geiger Consulting Cooking With Warp 4.0
Author of E-Secure - PGP Front End for MR/2 Ice
PGP & MR/2 the only way for secure e-mail.
OS/2 PGP 5.0 at: http://users.invweb.net/~whgiii/pgp.html
- ---------------------------------------------------------------
Tag-O-Matic: DOS=HIGH? I knew it was on something...
-----BEGIN PGP SIGNATURE-----
Version: 2.6.3a-sha1
Charset: cp850
Comment: Registered_User_E-Secure_v1.1b1_ES000000
iQCVAwUBNVyW+Y9Co1n+aLhhAQFSvgP8DSPkQznn0lagX26ufJsIHpj1hkn3STMf
4ENHxnq3NJpkznD0hZ0Y5Fa+N3R90Thffg8gNnLJ9mtdYovpHN9CzMKc0ZTXDmkO
JsOPBrdfn5jET/am+LxNWORJouLt/6V85YhBf+joMUr6UOmRjyHlTl5JUqKH+GJX
y3J3Kz66MHc=
=iD7k
-----END PGP SIGNATURE-----
Tag-O-Matic: Bugs come in through open Windows.
Tag-O-Matic: My best view from a Window was through OS/2.
The following archive was created by hippie-mail 7.98617-22 on Fri Aug 21 1998 - 17:17:24 ADT