Have I missed something or is there security missing?

[Bilbo]

Hi Guys!

I had to shutdown my Mac abnormally and after the restart Espionage could not mount the file I had under its control. The message in Console looked like this (skipped the full path):

"14/08/2012 21:37:59.968 Espionage: ERROR (+[DiskMaster mountDiskForFolderFace:silently:mountpoint:updateUI:error:]:433): mount failed for: file://localhost/Users/...... "

After scratching my head I fired up Disk Utility and mounted the sparsebundle file there and it did work without a problem, but I haven't been asked to enter passphrase?! Why is that? What sort of security is there if all one need is to get the file which is simply stashed away in ~/Library/Application%20Support/Espionage/Data/<UUID>.sparsebundle

Have I missed something in the security model of the application? If all there is to it is the unlock password for the UI, I think we can do much better with just encrypted sparsebundle. Please, tell me that I'm wrong and have missed something obvious here

By the way, after this manual mount/umount via Disk Utility, Espionage was able to mount the file again. Scratching my head.....

[zsolt]

Hello, it does happen that we have sometime this unable to mount problem, there will be a fix in the upcoming release. But so far nobody reported that he managed to mount it using the disk utility, what I do know is that we managed to mount it using hdiutil, which is probably what Disk Utility is using too.

What is indeed strange is that you were not asked for password, can you please check if the password is stored in the keychain?
Can you try to mount it again using disk utility?

Thanks
Zsolt

[Bilbo]

[zsolt]

And can you mount it again using disk utility?

[Bilbo]

[zsolt]

OK, can you please try the same thing with another disk image, i.e. can you take a test folder, add it to espionage, let it encrypt and then unlock with espionage, lock it, and then try with disk utility?

Sorry for bothering you but I need more info to localize the problem.

Thanks
Zsolt

[Bilbo]

[zsolt]

Before removing thr folder from espionage pls save the disk image for later check. Tx Zsolt

[Bilbo]