@T. Bug Reporter - Sorry, I wasn't complaining about you. Your explanation was helpful information, and told me that I might encounter prejudiced feelings. I was hoping my comment might stop the thread devolving into a 'plausible deniability' war, and encourage people to look past those feelings for a moment. @Paul - Thanks, I hadn't investigated the trigger system. I presume the list of actions it has, regarding executing commands, openning databases, etc., will be available in the plugin api, so...
It appears that I've stumbled upon a nerve. Please can we pretend that I never mentioned the reasons for my question? Pretty please :-)
Of course there is some security to be had if an item remains undetected. You won't ever be pressed to give up a secret if the asker doesn't know you have a secret in the first place. Plus, KeePass doesn't just hide keys, it also hides the fact that a lock exists. Consider, you have a database that you use, and then backups spanning the last few years. In amongst your old backups, you hide a second database. You can plausibly argue that you don't remember the password you used for a database two...
Of course there is some security to be had if an item remains undetected. You won't ever be pressed to give up a secret if the asker doesn't know you have a secret in the first place. Plus, KeePass doesn't just hide keys, it also hides the fact that a lock exists. Consider, you have a database that you use, and then backups spanning the last few years. In amongst your old backups, you hide a second database. You can plausibly argue that you don't remember the password you used for a database two...
Of course there is some security to be had if an item remains undetected. You won't ever be pressed to give up a secret if the asker doesn't know you have a secret in the first place. Plus, KeePass doesn't just hide keys, it also hides the fact that a lock exists. Consider, you have a database that you use, and then backups spanning the last few years. In amongst your old backups, you hide a second database. You can plausibly argue that you don't remember the password you used for a database two...
Quick question. I'm considering creating a plugin that would help with plausible deniability. One important aspect is obfuscation at the file system level. So, - Do keepass plugins have access to the local file system? - Can plugins create or modify thier own db files? - Can plugins change the datetime stamps of files? I'm hoping someone might be able to provide a quick answer and save me trawling through the plugin api documentation. Many thanks in advance!
Thanks Dominik. I love KeePass. It's invaluable to me, and your efforts are much...
Thankyou for the information. It's good to know that at least some snapshots are...