bugtraq - Re: Passwords in RAM dumps [formally Novell GroupWise Plain Text Password Vulnerability.]

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Tue, 05 Jul 2005 12:55:44 -1000
From: Jason Coombs <jasonc@...ence.org>
To: Anything But Microsoft <abm@...thingbutmicrosoft.org>
Cc: BUGTRAQ@...URITYFOCUS.COM, securityteam@...edson.com,
	secure@...rosoft.com
Subject: Re: Passwords in RAM dumps [formally Novell GroupWise Plain Text
 Password Vulnerability.]

Anything But Microsoft wrote:
> Do we conclude this is a Windows problem? Or are Windows programmers lazy, poorly trained or in general a bunch that don't care about security?

If you get it right the first time and disclose your engineering design 
decisions and your source code then you can't sell binary upgrades and 
lucrative support contracts.

How do you propose to create employment opportunities for ten billion 
people around the world if you don't lay the groundwork today through 
planned inefficiency and the systematic elimination of profitless 
thoughts and non-commercial creativity?

Regards,

Jason Coombs
jasonc@...ence.org