News for hackers. Stuff that matters.

A comment on TrendMicro Node.js HTTP server listening on localhost can execute commands. Parent comment

Re:TrendMicro Node.js HTTP server listening on localhost can... by ssalazar on Monday January 11, 2016 @08:01PM (#10884846)
> All password managers store plain text passwords. That's literally a requirement for them to work at all.

> Chrome encrypts the password in the SQLite database[0] using Windows' CryptProtectData() API

If its encrypted, then its not plaintext. Its ciphertext. In infosec lingo plaintext specifically refers to the unencrypted and otherwise unaltered original information.

[ Parent | on HN ]
Re:TrendMicro Node.js HTTP server listening on localhost can... by OJFord on Monday January 11, 2016 @10:40PM (#10885431)
Seeing as the parent comment was in reply to an assertion that Chrome stores plaintext passwords, I think it was assumed that the assertion intended to mean "Chrome has access to your plaintext passwords", otherwise the reply would simply have been "No, you're wrong".
[ Parent | on HN ]