Bug/Security Report - secure attachments open in preview
Hello,
I have a security concern using 1Password (for Mac). I have several screenshot / photos as attachment in secure notes or similar types within my 1Password database (e.g. photo of my TAN list from the Bank).
If I open the photo / screenshot from 1Password, it opens in Preview. When I leave the computer, but keep the photo open, 1Password looks after a certain amount of time (good), but the photo/screenshot is still open (until I manually close it).
I suggest pictures attached to secure notes / items to be opened in a different way (implement a picture viewer within 1Password) which automatically closes, if the 1Password database locks.
BR,
Holger
Comments
-
0
-
Hi @.holger,
When you open attachments in 1Password, we put the decrypted copies of it in a temporary sandboxed folder. That's where Preview.app or any other app opens the file from.
Once you lock and close 1Password, the temporary attachment folder will be deleted and when you close Preview, it will not be able to re-open it again.
We cannot force the closure of files, that's not how it works. OS X will keep a copy of the file in memory to ensure corruption doesn't occurs when other app closes it. You can try this in Preview by opening any image file you have (not in 1Password), then delete it from Finder, and you'll see Preview won't complain until you try to save it and gives you the option to save it again. If you close it, nothing happens and you have no file to open again (except for the one in Trash). If you try to empty your Trash, it will say there's a locked file and cannot delete it. This is how the system works globally to protect your data.
For your photo viewer suggestion, we have that in 1Password via the built-in OS X's Quick View feature, select the attachment in 1Password and press the spacebar, it will activate a quick view of your file without opening any files in any other apps.
You still do have to close the quick view windows to get rid of it.
0