[Okular-devel] [Bug 267350] filling out a PDF form saves data to some file i ~/.kde/share/apps/okular/docdata/

[John McCabe-Dansted]

On Wed, Jan 25, 2012 at 5:01 AM, Dan Armbrust
<daniel.armbrust.list at gmail.com> wrote:
> Go ahead.  I challenge you.  Fill out a random PDF form using Okular.
> Make a backup of said filled out form.  Now, lets see you open that

I don't like the design either.

> And X days later, when someone else shows up with a PDF file that has
> the same name, Okular will just dump the previous persons data
> directly into their form.

No, because "~/.kde" is just shorthand for "$USER/.kde", so a
different user will see a blank form. (Unless that user has your user
id and password, but then Okular is the least of your problems.)

This design has lost me data in the past, but calling this a security
flaw seems an exaggeration to me. If you don't use full disk
encryption, or share your password, other programs will have similar
security problems. Okular just makes it more obvious that data has
leaked (hey, maybe this is a security feature :P).

I'm not sure what purpose more debate would serve. Everybody's
position is clear, and it sounds like the KDE team wants someone to
volunteer to fix Poppler etc, but is missing the volunteer.

-- 
John C. McCabe-Dansted
___________________________________________________
This message is from the kde mailing list.
Account management:  https://mail.kde.org/mailman/listinfo/kde.
Archives: http://lists.kde.org/.
More info: http://www.kde.org/faq.html.