Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

On-disk cache is an unnecessary security risk #5

Open
quasistoic opened this issue Feb 24, 2023 · 2 comments
Open

On-disk cache is an unnecessary security risk #5

quasistoic opened this issue Feb 24, 2023 · 2 comments
Labels

Comments

@quasistoic
Copy link
Owner

It creates a cache_dir in your working directory named .op-cache. You will want to delete this after running as it contains all your raw data, including passwords. This was both so I could work offline for initial development and as a workaround for initial data load taking a long time. I will probably get rid of this on-disk cache before distribution.

@quasistoic
Copy link
Owner Author

On second thought, the on-disk cache is really useful. Would prefer to instead do smarter cache management:

  1. Identify fields that are marked by 1Password as password types and store hashes instead of real values.
  2. Prompt the user on exit to indicate whether to clear the on-disk cache or leave it for future use.

quasistoic referenced this issue Mar 7, 2023
Minor progress on Issue#5
@quasistoic
Copy link
Owner Author

Added a button to clear the cache in d7b4301

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant