When software forces a user to verify online(Phone Home) before use, it creates
ID: 655611 • Letter: W
Question
When software forces a user to verify online(Phone Home) before use, it creates an opportunity for private data created with this software to be physically connected to the Internet.
This may not be a big deal for some, but what if the data is sensitive or worth thousands of dollars? Even if the data is stored on a second drive that isn't plugged in, this doesn't mean there isn't an unknown exploit storing it on the OS hard drive.
Without requiring user to be a security expert, assuming their may be an exploit in the OS or in a running app, is there an absolute way to protect personal data created with an app requiring an online sign in?
Explanation / Answer
When software "phones home" for licensing, it is exposing its own internal data to its developer, it's not exposing the data you created with it. The data you create are in separate files that are opened with the software.
If, on the other hand, you suspect that the software is intentionally also sending your private data to an off-site location, that's a separate issue that has nothing to do with "online verification before use" because the software could be doing this at any time. This situation is a trust issue, and can be verified with network monitoring.
Related Questions
drjack9650@gmail.com
Navigate
Integrity-first tutoring: explanations and feedback only — we do not complete graded work. Learn more.