commons-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From bugzi...@apache.org
Subject DO NOT REPLY [Bug 32144] New: - add a secureDelete method to FileUtils.java
Date Wed, 10 Nov 2004 06:57:15 GMT
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=32144>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=32144

add a secureDelete method to FileUtils.java

           Summary: add a secureDelete method to FileUtils.java
           Product: Commons
           Version: unspecified
          Platform: All
        OS/Version: Other
            Status: NEW
          Severity: Enhancement
          Priority: Other
         Component: IO
        AssignedTo: commons-dev@jakarta.apache.org
        ReportedBy: hauser@acm.org


in org.apache.commons.io.FileUtils

Commons Fileupload uses at least the io's FileCleaner.track() method.
Unfortunately, they just use the plain java File.delete() method and not a more
sophisticated delete as offered in this package.

Especially, if servers running the FileUpload are sitting in DMZs and forward
all personal/private uploaded information in another (DB-)server behind another
firewall, one would not want that if the DMZ machine gets hacked, all previous
uploads that are supposedly deleted still can easily be found on the disk by a
not even that skilled attacker.

Therefore, it would be great to have a pgp-wipe alike secure delete method here!
it would overwrite the file multiple times and probably, it this should be
spawned as a separte thread since that may take longer than a state-of-the-art
GUI would want to wait for such an action to complete.

---------------------------------------------------------------------
To unsubscribe, e-mail: commons-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: commons-dev-help@jakarta.apache.org


Mime
View raw message