From 93647c0489ededbc5b939ad9d662159df49d08df Mon Sep 17 00:00:00 2001 From: Randall Winkhart Date: Sat, 17 Jun 2023 20:50:56 -0400 Subject: [PATCH] Demoted quick-unlock from recommended and added a security advisory Former-commit-id: b894e8b66fa30394fd8cb43cea818f8a82f62878 Former-commit-id: 1c78d9ac043cc0478c112936a3bb99798a88e9b8 --- lib/stweak.py | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/lib/stweak.py b/lib/stweak.py index edbb9a8..b901d51 100644 --- a/lib/stweak.py +++ b/lib/stweak.py @@ -217,7 +217,11 @@ def quick_unlock_config(_default): else: _quick_unlock_sel = curses_radio(('yes', 'no'), 'enable quick-unlock?\n\n\n\n\nquick-unlock allows you to use ' 'a shorter version of your gpg key passphrase and\nrequires a ' - 'constant connection to your sshyp server to authenticate') + 'constant connection to your sshyp server to authenticate\n\n' + 'WARNING: quick-unlock is only as secure as the environment' + ' you use it in\n\na compromised program on your computer could' + ' scan the process list in the\nbrief period during decryption ' + 'to retrieve the necessary information to decrypt your entries') if _quick_unlock_sel == 0: _enabled = 'true' else: @@ -372,7 +376,7 @@ def global_menu(_device_type, _top_message): if _device_type == 'client': _options.extend(['change gpg key', 're-configure ssh(ync)', 'change device name', '[OPTIONAL, RECOMMENDED] set custom text editor', - '[OPTIONAL, RECOMMENDED] enable/disable quick-unlock', + '[OPTIONAL] enable/disable quick-unlock', '[OPTIONAL, NOT IMPLEMENTED] su security mode', '[OPTIONAL] re-encrypt/optimize entries', '[OPTIONAL, NOT IMPLEMENTED] extensions and updates'])