I would like suggest that temp files created by 7-Zip during extraction in the temp directory should be shred after the process is completed automatic in order to prevent recovering. By default should use an quick one like "3 pass sanitize method (DOD 5220.22-M)" but also should have a better one like "Brouce Schneier 7 passes algorithm from is Applied Cryptography book" (First pass overwrites all disk data with 0xFF patterns, second pass with 0x00 patterns, and then five times with a cryptographically secure pseudo-random sequence.).
This would add a better security to the 7-zip program :)
This past year, NY Asian Escort special interest groups that are opposed to
responsible ownership of pets have worked relentlessly to pass state and
NY Escorts on the responsible ownership on several popular species of pet snakes. While many of the bans still allow
people to own their pets,NY Asian Escorts they leave the majority of pet
no options for their future. These bills often inhumanely deny pet owners access to specialized veterinary care and
serious threat to our Nations ecosystems by leaving desperate people with no options for unwanted pets other than
them into the environment.NY Escort
This sounds like a brilliant idea actually - any updates on this ?
As it is now is a security hole - I only recently realized that the temp dir is full of extracted for preview files (jpg, doc etc) that are never wiped !
As far as I know, this problem wasn't addressed until now. And I think the author is not planning to do it, unless more people request this feature to him.
Having the ability to assign the TEMP folder to a ram drive would be enough - but I have not managed to do it : https://sourceforge.net/projects/sevenzip/forums/forum/45797/topic/3683415/index/page/1
This feature "shred" can't be that much difficult, winzip (http://www.winzip.com/winzip-feature-comparison.htm) already have it "Auto-wipe (‘shred’) temporarily extracted copies of encrypted files using the U.S. Department of Defense standard (DoD 5220.22-M) to prevent misuse", also WinRAR (http://www.rarlabs.com/rarnew.htm) also "shred" temp files since version 3.80 (is optional, but the option is present)… if this two programs do this, it can't be that hard.
If the author (Igor Pavlov) doesn't know how to do it, it could probably make the interface to allow "SDelete" (http://technet.microsoft.com/en-us/sysinternals/bb897443), eraser (http://www.heidi.ie/eraser/) or other program to make that task for it … like Sandboxie (http://www.sandboxie.com/index.php?SecureDeleteSandbox) have for example… it doesn't delete by it self, but if the person add one of that two programs, the data will be shred.
The author should only advice that SDelete should be placed in the 7-zip program directory (for example), but NEEDS to be executed one time before being used (to accept the license terms of the SDelete), than it works just fine if the call command is correctly formatted.
I also think this would be a very good feature. I was quite surprised to discover 7-zip unzips to the temp folder and then does nothing. I mean, it doesn't even move it to the recycle bin afterwards.
I have a similar problem and i agree totaly to this idea.
- Add a DoD'n co functions (using library of others GNU software)
- Or temporary uncompress exclusively in a memory virtual drive for previews/run (for SFX)
Log in to post a comment.