new in Oubliette 1.1: password-free file access

At a request from a user, I have added a feature to Oubliette
which allows for "unencrypted" password files. If you use this
feature, Oubliette will not prompt you for password before
opening the file which contains your accounts.

THIS FEATURE IS DISABLED BY DEFAULT.
See below on how to enable it.

While I refer to this feature as "unencrypted file" for the sake
of simplicity, the file is in fact encrypted, but Oubliette uses
a built-in password to encrypt and decrypt the contents of the
file, hence the user does not have to enter the access password.

THE BUILT-IN PASSWORD IS CLEARLY VISIBLE IN THE PROGRAM BINARY
CODE, AS WELL AS IN THE SOURCE CODE!

If you use this feature, anyone who can execute Oubliette on your
computer can open, read and modify the information you stored in
the "unencrypted" file. THIS IS A SERIOUS SECURITY RISK.

Why implement the feature at all, then? Because some users wish
to store their data files on a disk partition securely encrypted
with third-party software (such as BestCrypt or PGPDisk). In that
case the user must enter the access passphrase to access any
information stored on the encrypted partition - and it doesn't
make sense to have to enter yet enother passphrase in Oubliette,
since the encryption is already as secure as possible. Perhaps
you wish to use Oubliette's storage functionality without relying
on its encryption strength for some other reason. The choice is
yours, but remember that saving your data file in "unencrypted"
state will open the file to anyone who can access your computer.

TO ENABLE THE FEATURE:
This feature CANNOT be enabled from the level of the program.
To enable it, please do the following:
1. Close Oubliette.
2. Open the program's configuration file ("oubliette.ini")
   in a plain text editor, such as the Windows Notepad. Find the
   following line:
	PermitUnencrypted=0
   and change it to
	PermitUnencrypted=1
3. Then save the file.

The next time you execute Oubliette and use the "Save As" or "Change
Passphrase" function, the dialog box will have a new checkbox,
"Do Not Encrypt". If this checkbox is checked, the file will be saved
encrypted only with the built-in passphrase, and you will not be
prompted for the passphrase when opening it.

You can always revert to using a regular passphrase by using the
"Save As" or "Change Passphrase" function again, and unchecking
the checkbox. The program will again prompt you for passphrase
and the file will be securely encrypted.

THE AUTHOR WILL __NOT__ BE RESPONSIBLE FOR ANY LOSS OR DAMAGE
RESULTING FROM USING THIS FEATURE.

-----------------------------------------------------------
Questions, comments, suggestions: email
<marekjed@pobox.com>
No HTML-formatted email please!
