Re:The Effectiveness of Publicly Shaming Bad Security
by thaumaturgy on Tuesday September 11, 2018 @07:54PM
(#17964470)
"Just".
Modern browsers and OS kernels have extensive mitigations against this. Reliably extracting a password from a browser process's heap would be newsworthy today.
Re:The Effectiveness of Publicly Shaming Bad Security
by rileymat2 on Tuesday September 11, 2018 @11:49PM
(#17965416)
I think “just” is apt. If you have a web request to send the password, you will have a url or username string very close by in memory that can be searched for.
Modern browsers and OS kernels have extensive mitigations against this. Reliably extracting a password from a browser process's heap would be newsworthy today.