Apple security blunder exposes Lion login passwords in clear text

Re:Apple security blunder exposes Lion login passwords in cl... by bodyfour on Sunday May 06, 2012 @02:24PM (#3935830)

I'm in the same boat; been using FileVault since day one.

I just checked and, sure enough, my cleartext password is visible if I run:

  $ sudo cat /var/log/asl/* | strings | grep 'password ='

So if my laptop were lost or stolen not only would the encryption be worthless, but my login password is available too. This is a big hole.

Guess today's a good day to switch to FDE

[ Parent | on HN ]

Re:Apple security blunder exposes Lion login passwords in cl... by Mythbusters on Sunday May 06, 2012 @04:56PM (#3936286)

And pray that it doesn't have a similar hole that gets discovered a few months down the line...

[ Parent | on HN ]