https://bugs.freedesktop.org/show_bug.cgi?id=51819
--- Comment #26 from Florian Reisinger <[email protected]> --- (In reply to comment #24) > Just imagine some headlines: > "Everybody can open your 'protected' LibreOffice documents without knowing > the password" > "LibreOffice developers waiting for a newbie to fix the issue at last" > > It is a bit absurd, isn't it? Okay, although this might sound impolite: Repo steps 1) Start LibeOffice 2) Open an encrypted file 3) Enter password 4) Crash OS 5) Log into the same user account ([a] with no password [b] with the text on a note right in front of the PC) > > I filed a lot of bugs into different systems, but nobody ever wanted to make > me, a user responsible for fixing the bug (especially not a security one). Let me phrase this way. The document has to be encrypted in RAM, as well as the password. IF someone really loves to, it will ever be possible... > I think, the people who were participated in the 3.5 changes should take a > look into it, solve the issue ASAP and then this bug should be buried > silently as deep as possible (it is not really a good ad for LO, which I > personally like very much). The bad thing about this bug is, that LibO forgets, that it is password protected.... > I will not post here again (completely useless), but I will inform the other > users about this issue if there is no progress this week. You did understand, that without YOU (or someone else) paying for this fix it might take weeks, without months??? What has to be changed: 1) Save recovery file with password ("", if not specified) 2) After crash, try to open it with "" pw (ask for password otherwise) [for every opened document] Quoting chromium source: "Be wary of surveillance by secret agents or people standing behind you." Anyway, any code pointers. I found these: http://opengrok.libreoffice.org/xref/core/oox/source/crypto/DocumentEncryption.cxx http://opengrok.libreoffice.org/xref/core/solenv/bin/modules/pre2par/files.pm http://opengrok.libreoffice.org/xref/core/framework/qa/complex/framework/recovery/RecoveryTools.java I am not a dev, neither do I have spare time to help more.... (Yes, we are doing this for free) -- You are receiving this mail because: You are the assignee for the bug.
_______________________________________________ Libreoffice-bugs mailing list [email protected] http://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs
