Security Flaw in OS X displays all keychain passwords in plain text

Re:Security Flaw in OS X displays all keychain passwords in ... by headShrinker on Friday July 08, 2016 @09:55AM (#12055471)

Also, this ability to parse all the passwords unencrypted isn't a flaw and it isn't new. I ran this very command maybe 5 or 6 years also. Granted I was shocked to see all my passwords dump unhashed but you have to enter the users password and it makes sense that is the computer needs the passwords unhashed, there should be a secure command to gain access to them.

[ Parent | on HN ]

Re:Security Flaw in OS X displays all keychain passwords in ... by yberreby on Friday July 08, 2016 @10:32AM (#12055776)

Hashing keychain passwords would make no sense. You hash passwords when you want to check against them. When you actually need to retrieve them at some point, however, you encrypt them.

[ Parent | on HN ]