Re: reveal password fix needed
From: Galen Somerville (galen_at_surewest.net)
Date: 12/03/04
- Next message: Ken Halter: "Re: where is the Key in TreeView.NET?"
- Previous message: Bonj: "Re: Random integer formula?"
- In reply to: Bonj: "RE: reveal password fix needed"
- Next in thread: Bonj: "Re: reveal password fix needed"
- Reply: Bonj: "Re: reveal password fix needed"
- Messages sorted by: [ date ] [ thread ]
Date: Fri, 3 Dec 2004 07:15:39 -0800
If someones using your computer they could download Snad Boys Revelation and
decode the asterisks.
Galen
"Bonj" <Bonj@discussions.microsoft.com> wrote in message
news:B7837DF9-E82C-4BBF-977E-495BC3DA01F9@microsoft.com...
> The point of displaying it as asterisks is not to hide it from another
> program on your computer - it's only to hide it from someone looking over
> your shoulder.
>
> A program running on your computer could glean it anyway by monitoring the
> keys pressed on the keyboard.
>
>
> "Martin Nemzow" wrote:
>
> > Passwords hidden by asterisks in VB and even within Windows can be
revealed
> > in full with API call SendMessage among other methods since messages
within
> > Windows are not secured in anything other than plaintext unlike trusted
> > systems. Even if the password is encrypted after entry, the password can
be
> > intercepted through the system messaging traffic before it gets
encrypted.
> >
> > This is not good. Has anyone a solution to this security flaw?
> >
> > Marty Nemzow
> >
> >
> >
- Next message: Ken Halter: "Re: where is the Key in TreeView.NET?"
- Previous message: Bonj: "Re: Random integer formula?"
- In reply to: Bonj: "RE: reveal password fix needed"
- Next in thread: Bonj: "Re: reveal password fix needed"
- Reply: Bonj: "Re: reveal password fix needed"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|