Hello, -------- Original-Nachricht -------- An 29. Nov. 2017, 00:48, schrieb: Sorry but I almost fainted ! (I even took a picture ! I could not believe this MEGA-HUGE security flaw right in front of my eyes ) (...) Sorry, you are supposed to be good and security expert but you are asking me (THE dumb USER) to report MY OWN PASSPHRASE AS A STRING to help you?? (...) ----------
Honestly I can't believe that this is true, until you prove this, which might be hard, as even a picture can be simple "ASCII Art". If you are correct, this would of course mean that Qubes OS can't be trusted. There should never be the option that a passphrase will be shown unencrypted. Even worse including this passphrase in an error report which gets saved or transferred to a 3rd party (even if it the Qubes Team) is an absolute no-go. As mentioned, I don't believe this. Can you provide more guidance what you have done and what hardware you are using, so that someone can verify this problem, if it is reproducable? Please also include all hardware specs, so that can also take this in account. If you are right and if Qubes is Open Source the source code should be analyzed to find this "hidden feature". But as mentioned, I think this is BS. [799] -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/UhGsICECEp38obsnohZcvD2OCQ0R5-cRIk0f4GwjenEgvkHBUE5bA4HRQtXNvFNIbC5qI7p1cERgfNNAta7GYMsPZRd3K-2pcoaY5sPPZ2o%3D%40protonmail.com. For more options, visit https://groups.google.com/d/optout.
