[sw-issues] [Issue 112391] Encrypted odt doesn't wi pe decrypted content
To comment on the following update, log in, then open the issue: http://www.openoffice.org/issues/show_bug.cgi?id=112391 User mav changed the following: What|Old value |New value Target milestone|OOo 3.3 |OOo 3.4 --- Additional comments from m...@openoffice.org Thu Aug 5 11:13:52 + 2010 --- It looks that it would be too late to integrate a solution for this problem in OOo 3.3. Changing the target to OOo3.4. Please set it back if you believe that it should be handled as a showstopper. - Please do not reply to this automatically generated notification from Issue Tracker. Please log onto the website and enter your comments. http://qa.openoffice.org/issue_handling/project_issues.html#notification - To unsubscribe, e-mail: issues-unsubscr...@sw.openoffice.org For additional commands, e-mail: issues-h...@sw.openoffice.org - To unsubscribe, e-mail: allbugs-unsubscr...@openoffice.org For additional commands, e-mail: allbugs-h...@openoffice.org
[sw-issues] [Issue 112391] Encrypted odt doesn't wi pe decrypted content
To comment on the following update, log in, then open the issue: http://www.openoffice.org/issues/show_bug.cgi?id=112391 User mav changed the following: What|Old value |New value CC|'hi' |'hi,mhu,mt' Ever confirmed| |1 Status|UNCONFIRMED |STARTED Target milestone|--- |OOo 3.3 --- Additional comments from m...@openoffice.org Tue Jun 29 12:27:59 + 2010 --- It is a question of luck whether the disk-part related to the temporary file is overwritten after the file has been deleted. The office does not overwrite the temporary file space explicitly, although it could be done. The problem is that it might affect performance, although it is probably the only way to solve it in 3.3. - Please do not reply to this automatically generated notification from Issue Tracker. Please log onto the website and enter your comments. http://qa.openoffice.org/issue_handling/project_issues.html#notification - To unsubscribe, e-mail: issues-unsubscr...@sw.openoffice.org For additional commands, e-mail: issues-h...@sw.openoffice.org - To unsubscribe, e-mail: allbugs-unsubscr...@openoffice.org For additional commands, e-mail: allbugs-h...@openoffice.org
[sw-issues] [Issue 112391] Encrypted odt doesn't wi pe decrypted content
To comment on the following update, log in, then open the issue: http://www.openoffice.org/issues/show_bug.cgi?id=112391 User hi changed the following: What|Old value |New value CC|'mav' |'hi' Assigned to|writerneedsconfirm|mav --- Additional comments from h...@openoffice.org Fri Jun 25 13:38:30 + 2010 --- I did a test with this tool Recuva. I get many pics which was deleted but not the picture from the encrypted document. Nevertheless, please evaluate this by your self to be sure. - Please do not reply to this automatically generated notification from Issue Tracker. Please log onto the website and enter your comments. http://qa.openoffice.org/issue_handling/project_issues.html#notification - To unsubscribe, e-mail: issues-unsubscr...@sw.openoffice.org For additional commands, e-mail: issues-h...@sw.openoffice.org - To unsubscribe, e-mail: allbugs-unsubscr...@openoffice.org For additional commands, e-mail: allbugs-h...@openoffice.org
[sw-issues] [Issue 112391] Encrypted odt doesn't wi pe decrypted content
To comment on the following update, log in, then open the issue: http://www.openoffice.org/issues/show_bug.cgi?id=112391 --- Additional comments from hu...@openoffice.org Fri Jun 25 16:19:49 + 2010 --- every time i test it, i can find the photos. I don't even have page file (win xp, sp3). I'll give it a try again today :/ - Please do not reply to this automatically generated notification from Issue Tracker. Please log onto the website and enter your comments. http://qa.openoffice.org/issue_handling/project_issues.html#notification - To unsubscribe, e-mail: issues-unsubscr...@sw.openoffice.org For additional commands, e-mail: issues-h...@sw.openoffice.org - To unsubscribe, e-mail: allbugs-unsubscr...@openoffice.org For additional commands, e-mail: allbugs-h...@openoffice.org
[sw-issues] [Issue 112391] Encrypted odt doesn't wi pe decrypted content
To comment on the following update, log in, then open the issue: http://www.openoffice.org/issues/show_bug.cgi?id=112391 --- Additional comments from h...@openoffice.org Fri Jun 25 17:23:51 + 2010 --- Sorry, maybe not clear. My comment was for MAV - Please do not reply to this automatically generated notification from Issue Tracker. Please log onto the website and enter your comments. http://qa.openoffice.org/issue_handling/project_issues.html#notification - To unsubscribe, e-mail: issues-unsubscr...@sw.openoffice.org For additional commands, e-mail: issues-h...@sw.openoffice.org - To unsubscribe, e-mail: allbugs-unsubscr...@openoffice.org For additional commands, e-mail: allbugs-h...@openoffice.org
[sw-issues] [Issue 112391] Encrypted odt doesn't wi pe decrypted content
To comment on the following update, log in, then open the issue: http://www.openoffice.org/issues/show_bug.cgi?id=112391 Issue #|112391 Summary|Encrypted odt doesn't wipe decrypted content Component|Word processor Version|OOo 3.2 Platform|Unknown URL| OS/Version|Windows XP Status|UNCONFIRMED Status whiteboard| Keywords| Resolution| Issue type|DEFECT Priority|P3 Subcomponent|viewing Assigned to|writerneedsconfirm Reported by|hugsy --- Additional comments from hu...@openoffice.org Mon Jun 14 16:44:27 + 2010 --- hello. This is my first post so i hope i have done it right. I found out about a security hole in the latest (3.2.0) Openoffice text file (odt). When you save a picture in a *.odt document and encrypt it, it is secured with a 256AES encryption. But when you open the file again, it decrypts its content and saves it in the temporary folder under some *.tmp file, so that you can view it. Then when you close the document again, document itself is secured, but the decrypted content in the temp folder is not wiped out (just normal deletion) and it can easily be restored with recovery software (Recuva). So any one who has a 5 minutes of spare time, can view the content of odt files if they were opened once. I tested this myself. And yes, picture was wiped out after the odt was created and yes, free space was overwritten as well, but when the file is opened and closed again, the decrypted content can be restored. - Please do not reply to this automatically generated notification from Issue Tracker. Please log onto the website and enter your comments. http://qa.openoffice.org/issue_handling/project_issues.html#notification - To unsubscribe, e-mail: issues-unsubscr...@sw.openoffice.org For additional commands, e-mail: issues-h...@sw.openoffice.org - To unsubscribe, e-mail: allbugs-unsubscr...@openoffice.org For additional commands, e-mail: allbugs-h...@openoffice.org
[sw-issues] [Issue 112391] Encrypted odt doesn't wi pe decrypted content
To comment on the following update, log in, then open the issue: http://www.openoffice.org/issues/show_bug.cgi?id=112391 User es changed the following: What|Old value |New value CC|''|'mav' Subcomponent|viewing |save-export --- Additional comments from e...@openoffice.org Mon Jun 14 17:18:41 + 2010 --- @hugsy: please try the same with 3.2.1 and comment. @MAV: any comment, hint? - Please do not reply to this automatically generated notification from Issue Tracker. Please log onto the website and enter your comments. http://qa.openoffice.org/issue_handling/project_issues.html#notification - To unsubscribe, e-mail: issues-unsubscr...@sw.openoffice.org For additional commands, e-mail: issues-h...@sw.openoffice.org - To unsubscribe, e-mail: allbugs-unsubscr...@openoffice.org For additional commands, e-mail: allbugs-h...@openoffice.org
