Bugtraq mailing list archives

response to tax software not encrypting tax info


From: auto40951 () hushmail com
Date: Thu, 13 Mar 2003 10:26:55 -0800


-----BEGIN PGP SIGNED MESSAGE-----

PivX:

I am wondering, is it really the responsibility of every piece of software that handles potentially sensitive info to 
provide (strong)encryption capabilities?

I think the onus of protecting sensitive info should fall on the user in many cases. This obviously includes not 
sharing your tax info on KaZaA or on network shares and using reliable third-party encryption software to protect 
anything that you really don't want other people to know about. NTFS permissions and EFS can also be used to this 
effect. In the end, these measures will also be way way way more effective than relying on some hacked together info 
encoding algorithm that merely obsfucates your tax info and introduces the additional
security "vulnerability" of weakly encoding the information.

-----BEGIN PGP SIGNATURE-----
Version: Hush 2.2 (Java)
Note: This signature can be verified at https://www.hushtools.com/verify

wl0EARECAB4FAj5wzmoXHGF1dG80MDk1MUBodXNobWFpbC5jb20ACgkQ7s7ZokLom1is
MQCgkLFM8vUJ/boRAC0EUTRlPlucuFcAl26K776nL35aCX8x5xU/IR/Olb8=
=SwAH
-----END PGP SIGNATURE-----




Concerned about your privacy? Follow this link to get
FREE encrypted email: https://www.hushmail.com/?l=2 

Big $$$ to be made with the HushMail Affiliate Program: 
https://www.hushmail.com/about.php?subloc=affiliate&l=427


Current thread: