Re: plaintext passwords - my 0.02c

On Jul 19, 2006, at 13:11, Greg Thomas wrote:

>> Anyone gaining physical access to the disk or its copies
>> (backups) will be able to retrieve the stored information,
>> bypassing OS
>> autentication, protection of the directories and so on.
>
> This is not always true. A proper encryption scheme will only allow an
> individual holding the correct password access to the data, short of a
> lengthy brute-force attack.
>
> I believe that this sort of scheme is what is used to store the
> passwords on Win32 boxes.

That should also be the case for Mac OS X home directories that are
stored using the FileVault feature.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Wed Jul 19 14:12:54 2006