full-disclosure - Re: Google Talk cleartext credentials in processmemory

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <1bde4ec50512010306u1c9a2cbdv@mail.gmail.com>
Date: Thu Dec  1 11:06:22 2005
From: colweb at gmail.com (Colin)
Subject: Re: Google Talk cleartext credentials in
	processmemory

On 01/12/05, pagvac <unknown.pentester@...il.com> wrote:

> Even in corp environments you still see some users running admin
> privileges. Yes, I agree, it doesn't happen as often as in home
> environments, but it *does* happen.

Our corporate environment is almost completely full of administrators.
The EMEA region is tighter, but ASIAPAC and AMERICAS regions and
basically 100% admins. Management dont see the point "if the machine
can just be re-imaged".... god save us.  Mind you our EMEA region
everyone is a "Power User" which as most will know can get Admin
rights in about 1 minute.

More worrying was the Domain Admins logging onto their PCs every day
with those privs.. omg