[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [dvd-discuss] Fwd: Bush taps Clarke as CyberdefenseChief





> -----Original Message-----
> From: D. C. Sessions [mailto:dcs@lumbercartel.com]
> Sent: Thursday, October 11, 2001 7:54 PM
> To: dvd-discuss@eon.law.harvard.edu
> Subject: Re: [dvd-discuss] Fwd: Bush taps Clarke as CyberdefenseChief
> 
> 
> On Thursday 11 October 2001 10:02, you wrote:
> > > -----Original Message-----
> > > From: D. C. Sessions [mailto:dcs@lumbercartel.com]
> > ...
> > > 
> > > Microsoft Passport stores login and password information in plain
> > > text on the user's hard drive.
> > > 
> > ...
> > 
> > Plain text?  Somehow I had missed hearing that
> > about Passport (I had heard other problems).  
> > 
> > I can't believe that MSoft messed up to >that<
> > extent!
> 
> After a bit of further research, it seems that it's stored encrypted
> but passed through the APIs in clear.
> 

That is a more believable screw-up on their part.  (And
still a HUGE security hole...)

-- 
-Richard M. Hartman
hartman@onetouch.com

186,000 mi./sec ... not just a good idea, it's the LAW!