OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Passwords in RAM dumps [formally Novell GroupWise Plain Text Password Vulnerability.]

From: Anything But Microsoft (abmanythingbutmicrosoft.org)
Date: Mon Jul 04 2005 - 18:19:55 CDT


App after app tested by me here finds my user name and password in memory. Two apps out of fourteen tested stored the password in RAM with some type of hash. But I wouldn't be surprised if this was easily translated.

I've only looked at the running process of five apps on Linux so far but have yet to find a password in plain text.

Do we conclude this is a Windows problem? Or are Windows programmers lazy, poorly trained or in general a bunch that don't care about security? (like Bill G, expept when convenient and not compromising the monopoly?)