News for hackers. Stuff that matters.

A comment on Mac OS X Lion Login Passwords Extracted With Ease. Parent comment

Re:Mac OS X Lion Login Passwords Extracted With Ease by sp332 on Tuesday July 26, 2011 @09:34AM (#2807205)
If you have the autologin feature enabled, which would you prefer: keep the password in RAM, where most people can't get it, or put it on the hard drive, which is a much easier target?
[ Parent | on HN ]
Re:Mac OS X Lion Login Passwords Extracted With Ease by ovi256 on Tuesday July 26, 2011 @09:49AM (#2807275)
But why would the autologin implementation need access to the cleartext password ? And then why is the cleartext password stored at all ?

These seems like big holes.

[ Parent | on HN ]
Re:Mac OS X Lion Login Passwords Extracted With Ease by epochwolf on Tuesday July 26, 2011 @12:15PM (#2808019)
On OSX, probably to unlock keychain.
[ Parent | on HN ]
Re:Mac OS X Lion Login Passwords Extracted With Ease by Sidnicious on Tuesday July 26, 2011 @01:21PM (#2808424)
Yep: http://www.brock-family.org/gavin/perl/kcpassword.html
[ Parent | on HN ]