On 14/06/07, Oded Arbel <[EMAIL PROTECTED]> wrote:
If you want to really make sure no one can recover your files, you need
to "shred" them, which is a feature offered by some security minded
software - for example, kgpg from the KDE project. This involves
overwriting the files with a series of 0s and 1s in specific patterns
(doing so more then once, if you really want to be safe). Unfortunately
to the best of my knowledge there's no feature to automatically "shred"
files deleted during the normal operation of standard software, so your
browser cache is still vulnerable.
While digging a bit about this (had an idea for a project) I found the
following:
1. see "man shred" - it basically warns that it's ineffective on
filesystems which journal data (like ResierFS, XFS, or ext3 with data
journaling option)
2. see "man chattr" - it says that ext3 has file attributes to
zero-out the data of files when they are deleted ('s') but it's not in
the mainstream kernel, leading me to suspect it's an experimental
option that never got merged.
All in all, it could be an interesting trick to try to put certain
directories in "shred" mode at the filesystem level, maybe through
"fuse".
--Amos
=================================================================
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]