от Kai Liu (Разработчик) на Июнь 20, 2009 · permalink

UF3 will *never* store the actual URLs and patterns that you encounter. If someone breaks into your computer, ransacks your profile, and steals your URL Flipper pattern database, it would be impossible for them to extract any sort of history data without brute-force trial and error.

This protection is inherent in how UF3 handles pattern data: instead of relying on the patterns themselves, UF3 remembers only a cryptographic 1-way hash of a pattern, much like how passwords are protected in modern operating systems by storing only their cryptographic hashes. Thus, the only way any private information can "leak" out is if someone is visiting a site that you've remembered the pattern for, in which case they would be able to increment/decrement without going through pattern setup first. Once again, aside from a brute-force trial-and-error matching of every possible URL pattern hash against the list of stored hashes, it is simply impossible to extract arbitrary information from the stored data.

PS: All UF3 data is stored locally in the user profile. UF does NOT use (and has never used) "cloud" storage.

PPS: The "Clear All Pattern Data" command will permanently delete all accumulated data.