tags 605901 +security thanks the fact that gobby stores logs in ~/.infinote-records is also problematic from a security perspective, because most users' default umask is 022, and the library apparently makes no attempt to make the logs themselves more hidden. So the default mode is to leak information that should be private. :(
i'm glad that gobby is using TLS for network privacy and integrity by
default. But storing the logs in a world-readable directory nullifies
that effort for users on multi-user systems, or whose home directories
are otherwise world-readable.
By comparison, i believe that other network-aware and privacy-sensitive
tools like firefox or iceweasel make ~/.mozilla mode 0700 by default,
regardless of the user's umask.
--dkg
signature.asc
Description: OpenPGP digital signature
