On Tue, Sep 26, 2000 at 11:00:55AM -0700, Richard Hartman wrote:
> Tom Zerucha wrote in message <25430@palm-dev-forum>...
> >
> ...
> >Further, the only use of the password is to unlock the Palm. How many
> >(really) keep their palm locked?
>
> Also used to unhide hidden records. There could be lots of data
> you're not seeing even on an unlocked PDA w/o the password.
>
> >And the greater problem is that hotsyncing exposes all the records
>
> Yep. So does a memory scanning app on the PDA itself, unless
> the records are encrypted.
[...]
> Yeah, but your desktop system isn't with you ... who's at your
> desk right now looking into \Palm\xxx\backup\*.pdb ? ;-)
Indeed, it's always been my understanding that private records are
*not* encrypted at all. So if someone has physical access to your
Palm, or access to the HotSync'd data on your desktop, they can read
your private records directly. No need to bother trying to capture
and/or decrypt the palmos password. Or am I missing something?
John
--
For information on using the Palm Developer Forums, or to unsubscribe, please see
http://www.palmos.com/dev/tech/support/forums/
