On Friday, February 8, 2019 at 4:20:25 PM UTC+1, Jeremy Ruston wrote: > > Hi Mario > > On 8 Feb 2019, at 13:53, PMario <[email protected] <javascript:>> wrote: > > - So the only thing you need to know is tiddlywiki.com and you can read > the local storage from all TWs stored in the subdirectories. > > That’s a bug, fixed now: > > https://github.com/Jermolene/TiddlyWiki5/commit/2710fae71d276c8a82e78d4f13b0d2735e0b71f5 >
That's OK. ... BUT ... *My biggest concern is privacy*. ... Now I get even more info about the underlying structure of a webpage. eg: If users with different privileges share a PC, a user which has access to the main origin can see, the subdirectory structure, plus "some" content in plain text. Some setups may use "un-guessable" subdirectory names to store data. This "un-guessable" directory is plaintext, as soon as someone (with the right privileges) ever opened the subdirectory. ... I know, that "security by obscurity <https://en.wikipedia.org/wiki/Security_through_obscurity>" is used, because it's simple to implement. ... I just want to make sure, that our users know about these problems! have fun! mario -- You received this message because you are subscribed to the Google Groups "TiddlyWiki" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at https://groups.google.com/group/tiddlywiki. To view this discussion on the web visit https://groups.google.com/d/msgid/tiddlywiki/f39284b3-3dcd-4f25-b96c-e92356903b09%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.

