Re: Credentials held unencrypted in memory during runtime

On Tue, Apr 12, 2011 at 3:29 PM, Bob Archer <Bob.Archer_at_amsi.com> wrote:
> I still have to agree with a previous poster.. how did he find his password... did he search
> for his password? I'm not sure a hacker would be able to do that.

From the source code, a cracker could potentially determine the
location of the password relative to something he can find. Then the
cracker searches for the "land mark" and, from there, locations the
password.

------------------------------------------------------
http://tortoisesvn.tigris.org/ds/viewMessage.do?dsForumId=4061&dsMessageId=2719193

To unsubscribe from this discussion, e-mail: [users-unsubscribe_at_tortoisesvn.tigris.org].
Received on 2011-04-12 21:37:32 CEST