Document security risks of using a computer that someone else has admin access to

[micahellison]

Affected Page(s)

Privacy and Security doesn't have any mention of the case in which you have an encrypted journal on a machine that someone else has admin access to.

What Could Be Better?

While it might be obvious to power users, I think it's worth making clear that even if your journal is encrypted at rest, a user with administrative privileges may be able to compromise your journal while you're decrypting it.

Some examples of how this could happen:

• the admin could install a script with the same name as the editor in your config file to intercept your new entries or edited data
• the admin could install a keylogger that detects the password when you type it
• the admin could visually monitor your usage as you journal

Other Information

Feel free to comment if you can think of other similar scenarios. PRs welcome!