Re: Loginwindow.app and Mac OS X

2008-02-29 Thread Jacob Appelbaum
oc photon wrote: n Thu, Feb 28, 2008 at 1:56 PM, Jacob Appelbaum [EMAIL PROTECTED] wrote: Moin moin Bugtraq readers, Bill Paul and I have discovered that LoginWindow.app doesn't clear credentials after a user is authenticated. This has already been discovered in 2004. While the author only

Re: Loginwindow.app and Mac OS X

2008-02-29 Thread oc photon
n Thu, Feb 28, 2008 at 1:56 PM, Jacob Appelbaum [EMAIL PROTECTED] wrote: Moin moin Bugtraq readers, Bill Paul and I have discovered that LoginWindow.app doesn't clear credentials after a user is authenticated. This has already been discovered in 2004. While the author only looks at swap

Re: Loginwindow.app and Mac OS X

2008-02-29 Thread Matt Johnston
On Thu, Feb 28, 2008 at 06:28:51PM -0800, Jacob Appelbaum wrote: oc photon wrote: n Thu, Feb 28, 2008 at 1:56 PM, Jacob Appelbaum [EMAIL PROTECTED] wrote: Moin moin Bugtraq readers, Bill Paul and I have discovered that LoginWindow.app doesn't clear credentials after a user is

Loginwindow.app and Mac OS X

2008-02-28 Thread Jacob Appelbaum
Moin moin Bugtraq readers, Bill Paul and I have discovered that LoginWindow.app doesn't clear credentials after a user is authenticated. We discovered this while testing our EFI-based memory recovery utilities discussed recently[0]. We've found that depending on the state of capture, the