News for hackers. Stuff that matters.

A comment on Microsoft Edge stores all passwords in memory in clear text, even when unused. Parent comment

Re:Microsoft Edge stores all passwords in memory in clear te... by dvt on Tuesday May 05, 2026 @01:08AM (#48018291)
Absolutely wrong. Are we writing the same code here? Page guards are for all userspace access. (In fact, I think kernel space might also trigger them, but can be circumvented. PS: I'm being polite :) Kernel space 100% triggers them, but can be cleverly circumvented by fucking with logs.)
[ Parent | on HN ]
Re:Microsoft Edge stores all passwords in memory in clear te... by Hikikomori on Tuesday May 05, 2026 @04:10AM (#48019419)
Could you not use VirtualProtectEx to strip PAGE_GUARD?

Even so, none if these methods offer protection, at best you can get some detection, but that doesn't matter when they got your passwords already.

[ Parent | on HN ]