Jonathan Hendry wrote:
For instance, if you plug a secure, encrypted USB key into a public- access Mac, to which you may not have admin access in order to change the preference setting. You don't want some malware running on such a machine to be able to snoop the password that you enter to access the contents of the key.
If the machine is untrustworthy, then ALL of the machine is untrustworthy. It could just as easily have a hardware keyboard sniffer on it as malware. Worrying about making the password that's already been entered into memory unpageable is closing the barn doors after the horse is gone.
-- GG _______________________________________________ Cocoa-dev mailing list (Cocoa-dev@lists.apple.com) Please do not post admin requests or moderator comments to the list. Contact the moderators at cocoa-dev-admins(at)lists.apple.com Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/cocoa-dev/archive%40mail-archive.com This email sent to arch...@mail-archive.com
