Re:A walkthrough the AcridRain password stealer
by chime on Tuesday August 28, 2018 @06:13PM
(#17863402)
Scary about .pfx on Desktop. Working with an IT vendor for a recent Windows software deployment, I noticed their techs kept saving .pfx, .pem/.crt etc. files to the Desktop directly from browser. Until I read this, I thought I was just being paranoid about deleting these files after the techs were done.
[ Parent
| on HN ]
Re:A walkthrough the AcridRain password stealer
by tetha on Wednesday August 29, 2018 @01:23PM
(#17869997)
I guess I'm paranoid, too. I've even been pondering to setup ~/pocket-dimension as a small ramdisk.
If I store production keys or certificates on my usual ext4 filesystem, all changes are written to the ext4 journal. Thus deleting the files technically isn't enough - even with shred. A ramdisk would avoid this issue and would automatically wipe itself on shutdown.