Splasm Software Discussions

While doing my yearly audit of files that I backup offsite, I noticed that Checkbook/Pro keeps the Checkbook Password stored as CLEAR TEXT (un-encrypted).

I wont go on about how I think this is ridiculous, but I just wanted everyone to know: be-careful with your Checkbook/Pro accounts file. If you have a password set, it's stored un-encrypted right in the file.

CheckBook's password protection was designed simply as a casual deterrent, with Mac OS X's user account security picking up user-level security and FileVault handling encryption. This leaves a vulnerability for shared user accounts but we feel it's reasonably likely that users concerned with file-level security would not share user accounts in the first place, would disable automatic login to any one user account, and would also employ a password-protected screensaver.

_________________
Allan Woodall
Phosphorescent Phage
Splasm Software
http://www.splasm.com