Re: Credentials held unencrypted in memory during runtime

Stefan Küng <tortoisesvn_at_gmail.com> wrote:
> If you're system is configured so that users actually can open and
> read the paging file you don't need to worry about security issues
> anymore. Because you don't have any security at all and therefore
> can't have any issues with it. Can't have an issue with something that
> doesn't exist.

The issue is not what happens while the OS is running. Proper configuration
should prevent any information leaks, and improper configuration means you've
already lost.

The problem is what happens if an attacker can examine the disk while the OS
is offline. There have been too many examples of laptops being lost/stolen
with sensitive data on them to dismiss this scenario.

------------------------------------------------------
http://tortoisesvn.tigris.org/ds/viewMessage.do?dsForumId=4061&dsMessageId=2719073

To unsubscribe from this discussion, e-mail: [users-unsubscribe_at_tortoisesvn.tigris.org].
Received on 2011-04-12 15:11:05 CEST