On Wed, 24 Mar 2010 11:29:48 -0400
Dan Hyde <[email protected]> wrote:

> > 
> > Absolutely not meant as a personal comment, but it's important to
> > remember fileserver cores may contain your cell-wide key, and you
> > definitely don't want to share them publicly without verifying that
> > they don't.

Augh, yes, sorry. Certainly don't just give it to the list, nor just
throw it in ~atossava/ or anything like that. Anyone you give it to you
must trust. "Would you be willing to share" is an actual question, not
just a nicety, since the answer is often very reasonably 'no'.

But I didn't actually mention the danger; thank you, Simon, for saying
something.

> And ensure your efforts to remove the KeyFile content do not
> accidentially remove some other random bytes of unrelated material,
> thus leaking your KeyFile content by the fact you removed it from the
> core file.
> 
> I'd love to share core files, but worry I'll mess up.

In at least this case, just asking for dbx/gdb commands is painless
enough.

-- 
Andrew Deason
[email protected]

_______________________________________________
OpenAFS-info mailing list
[email protected]
https://lists.openafs.org/mailman/listinfo/openafs-info

Reply via email to