Keylogger

[Xen]

Ralf Mardorf schreef op 03-12-2017 9:49:

> The sfill manpage mentions "LIMITATIONS" in capital letters ;).

Boohoo, every segment in a man page starts with DESCRIPTION capital 
letters ;-).

(You might actually delude someone there you know ;-)).

I mean the real issue here is still user space programs that do not 
overwrite in place.

Of which there are probably many and you can't really know which.

For instance, every log file that gets rotated (and gzipped) probably 
leaves a copy behind.

If you wanted this to be safe, the filesystem driver would have to 
overwrite with zeroes upon unlinking.

However, it seems the secure-delete patch for ext4 was also never added 
to the kernel.

https://lwn.net/Articles/462437/



So yeah, shred is of limited value, you are right.

But mostly because of background saves by applications (and background 
unlinking by applications), not because of hardware (or even 
file-system) issues.