Re: Question about directory for Application Caches
Re: Question about directory for Application Caches
- Subject: Re: Question about directory for Application Caches
- From: Phil <email@hidden>
- Date: Sat, 16 Aug 2008 12:40:46 +1200
On Sat, Aug 16, 2008 at 3:33 AM, Jason Coco <email@hidden> wrote:
> 1) ~/Library/Caches is world writable too... so as long as you're logged in,
> even if you have
> your filevault armed, you're still gonna be somewhat vulnerable to cache
> attacks.
> 2) The new temporary directory (returned the same by
> confstr(_CS_DARWIN_USER_TEMP_DIR,...)
> and NSTemporaryDirectory(...) is also outside the sphere of filevault
> /and/ your files there
> are not necessarily erased on log-out. I think it's cleaned up with the
> computer boots (although it
> may be deleted on shutdown, but I don't think so)... so if any sensitive
> information were written to
> the temp dir and the application relied on it being cleaned by the OS,
> that could be an issue too if
> your physical drive were compromised...
>
Also consider the case that the user has a network home directory. If
your caches are going to be very large and frequently accessed (off
the disk), then there may be some performance penalties.
Phil
_______________________________________________
Cocoa-dev mailing list (email@hidden)
Please do not post admin requests or moderator comments to the list.
Contact the moderators at cocoa-dev-admins(at)lists.apple.com
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden