Mac OS X keeps clear text passwords


c't magazine about a potential Mac OS X vulnerability

Germany's leading professional computing magazine c't posted a report about clear text password in Mac OS X on its web site this week. According to the magazine, the password of the current user is kept in clear text in the swap files of the operating system. The swap files are stored in the folder /var/vm and can be accessed by the user. Other operating systems keep the current user passwords as hash values in /etc/shadow.

Posted: Fri - December 10, 2004 at 02:48 AM           |

©