[jira] Closed: (IO-70) [io] Add a secureDelete method to FileUtils.java

["Stephen Colebourne (JIRA)" <ji...@apache.org>]

     [ http://issues.apache.org/jira/browse/IO-70?page=all ]

Stephen Colebourne closed IO-70.
--------------------------------

    Resolution: Fixed

No feedback so losing as fixed in rv439102 for v1.3.

> [io] Add a secureDelete method to FileUtils.java
> ------------------------------------------------
>
>                 Key: IO-70
>                 URL: http://issues.apache.org/jira/browse/IO-70
>             Project: Commons IO
>          Issue Type: Improvement
>          Components: Utilities
>         Environment: Operating System: other
> Platform: All
>            Reporter: Ralf Hauser
>            Priority: Minor
>             Fix For: 1.3
>
>
> in org.apache.commons.io.FileUtils
> Commons Fileupload uses at least the io's FileCleaner.track() method.
> Unfortunately, they just use the plain java File.delete() method and not a more
> sophisticated delete as offered in this package.
> Especially, if servers running the FileUpload are sitting in DMZs and forward
> all personal/private uploaded information in another (DB-)server behind another
> firewall, one would not want that if the DMZ machine gets hacked, all previous
> uploads that are supposedly deleted still can easily be found on the disk by a
> not even that skilled attacker.
> Therefore, it would be great to have a pgp-wipe alike secure delete method here!
> it would overwrite the file multiple times and probably, it this should be
> spawned as a separte thread since that may take longer than a state-of-the-art
> GUI would want to wait for such an action to complete.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

---------------------------------------------------------------------
To unsubscribe, e-mail: commons-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: commons-dev-help@jakarta.apache.org