bugtraq - Passwords in RAM dumps [formally Novell GroupWise Plain Text Password Vulnerability.]

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Mon, 04 Jul 2005 19:19:55 -0400
From: "Anything But Microsoft" <abm@...thingbutmicrosoft.org>
To: <@securityfocus.com BUGTRAQ <BUGTRAQ@...URITYFOCUS.COM>,
	<securityteam@...edson.com>
Subject: Passwords in RAM dumps [formally Novell GroupWise Plain Text
	Password Vulnerability.]

App after app tested by me here finds my user name and password in memory. Two apps out of fourteen tested stored the password in RAM with some type of hash. But I wouldn't be surprised if this was easily translated.

I've only looked at the running process of five apps on Linux so far but have yet to find a password in plain text.

Do we conclude this is a Windows problem? Or are Windows programmers lazy, poorly trained or in general a bunch that don't care about security? (like Bill G, expept when convenient and not compromising the monopoly?)