Attachments to Notes are not secure
I attach a Word document containing confidential information and then delete the original. In Finder I search for the document name and find it and have no problem opening it. Anyone who knows where 1password attachments are stored can find and view all my confidential attachments without having to open 1Password. Not very secure in my opinion. Is there is any way to prevent opening attachments outside of 1Password?
Comments
-
I think before leaping to conclusions about security flaws :) you might find it helpful to read this AgileBits post.
If that doesn't explain the issue you see please set exactly the steps required to show the issue. For what it's worth I just:
- created a file in Word and saved it as test.docx;
- created a test login item in 1P5 for Mac and add the Word file;
- deleted the Word file;
- searched in finder for the file—with no result.
You need to explain what you're doing differently.
Stephen
0 -
Hi @drewyallop,
I suspect there may be an element of confusion at play. If you feel this is not the case then we would appreciate as much detail as possible regarding the steps to duplicate. I would go as far as saying we'd like to know if you're using the standard OS X Trash, did you empty the Trash afterwards and so on. All of that would help in determine the exact root of the issue and obviously the ability to replicate the problem.
0