advertisement

Weblog:   New (local) Mac OS X vulnerability : Passwords in Swap files
Subject:   Of course...
Date:   2004-06-27 23:20:12
From:   recusant
Your password will have to have been swapped out for this to work. There's always the possibility that it just hasn't been swapped out yet.


Pull out all except 128MB of RAM and try again :-)
Full Threads Oldest First

Showing messages 1 through 1 of 1.

  • Not a problem here
    2004-06-28 08:28:11  puggsly [Reply | View]

    My system has been up and running for weeks (I can't imagine that everything has not been swapped out at one time or another). And there are a couple of entries that show up but none has my password.

    What was the source of UserName and password that you saw? Was it a logon to an AFP share? Some web site name/password? or your initial log on? I know there are times when servers will not accept encrypted passwords that OS X will send them in the clear? Maybe that is your case?

    Give us more info, so we can figure out what, if anything, is vulnerable?
Showing messages 1 through 1 of 1.