Original von Elchbulle
Yeah I typed to fast :-)
3.3.1
I found that deactivate now, but I want to remove kwallet full from my systems.
It watches the hole time what Im doing. Waiting for a password I enter in konqueror.
No, AFAIK that's not how it works. KWallet is not a keylogger that watches what you do. It's konqueror that talks to kwallet if it's enabled. I guess it asks kwallet for the password for a certain site if it detects a password field in the page.
If you don't trust your web browser with your web passwords then you probably shouldn't be using the web in the first place. Or maybe be talking to web servers using HTTP over telnet to port 80. But then again, your telnet program could be trojaned! ;-)
Original von Elchbulle
Can this not abused ? Possible an point for a spyware attack.
As soon as a malware has write access to your binaries (normally root) then nothing is safe. It could exchange your browser binary, or install a real key logger.
Original von Elchbulle
I have all my passwords in /dev/brain where they belong.
I'd say deactivating kwallet is good enough for what you have in mind, but that's up to you. I just checked my debian installation, and apt-get lets you only uninstall the manager application kwalletmanager, I think that does not remove the kwallet support. Not sure if this is possible with the debian packages.