Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.sys.mac.system > #29337

Re: What gets secured by login password?

From nospam <nospam@nospam.invalid>
Newsgroups comp.sys.mac.system
Subject Re: What gets secured by login password?
Date 2012-08-11 20:43 -0400
Organization A noiseless patient Spider
Message-ID <110820122043399056%nospam@nospam.invalid> (permalink)
References <SalmonEgg-758158.07474111082012@news60.forteinc.com> <slrnk2d9nb.1cun.g.kreme@mbp55.local>

Show all headers | View raw

In article <slrnk2d9nb.1cun.g.kreme@mbp55.local>, Lewis
<g.kreme@gmail.com.dontsendmecopies> wrote:

> > 2.  How is the password stored in the computer?
> 
> In an encrypted keychain.

nope. it's actually here:
/private/var/db/dslocal/nodes/Default/users/<username>.plist

> > 3.  If someone has access to the computer can they go to a spot in the 
> > operating system to read the password?
> 
> No.

more accurately, it depends.

there are forensic tools that can extract it (generally available to
law enforcement but the bad guys have probably procured a copy of their
own), and it's also possible that the password is in memory or in a
virtual memory swap file, unless that is secured. 

set it: system preferences/security/general/use secure virtual memory.

Back to comp.sys.mac.system | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

What gets secured by login password? Salmon Egg <SalmonEgg@sbcglobal.net> - 2012-08-11 07:47 -0700
  Re: What gets secured by login password? nospam <nospam@nospam.invalid> - 2012-08-11 10:52 -0400
    Re: What gets secured by login password? TDH1978 <thedeerhunter1978@movie.uni> - 2012-08-15 17:33 -0400
      Re: What gets secured by login password? Michael Vilain <vilain@NOspamcop.net> - 2012-08-15 18:06 -0700
        Re: What gets secured by login password? me@home.spamsucks.ca (Király) - 2012-08-17 06:20 +0000
  Re: What gets secured by login password? Lewis <g.kreme@gmail.com.dontsendmecopies> - 2012-08-11 18:39 +0000
    Re: What gets secured by login password? nospam <nospam@nospam.invalid> - 2012-08-11 20:43 -0400
      Re: What gets secured by login password? JF Mezei <jfmezei.spamnot@vaxination.ca> - 2012-08-11 21:13 -0400
        Re: What gets secured by login password? dempson@actrix.gen.nz (David Empson) - 2012-08-12 14:02 +1200
    Re: What gets secured by login password? Wes Groleau <Groleau+news@FreeShell.org> - 2012-08-12 00:20 -0400
      Re: What gets secured by login password? Fred Moore <fmoore@gcfn.org> - 2012-08-12 11:33 -0400
      Re: What gets secured by login password? Paul Sture <paul.nospam@sture.ch> - 2012-08-13 12:09 +0200
        Re: What gets secured by login password? Lewis <g.kreme@gmail.com.dontsendmecopies> - 2012-08-13 22:49 +0000
          Re: What gets secured by login password? Wes Groleau <Groleau+news@FreeShell.org> - 2012-08-13 20:54 -0400
            Re: What gets secured by login password? Paul Sture <paul.nospam@sture.ch> - 2012-08-14 12:39 +0200
              Re: What gets secured by login password? Wes Groleau <Groleau+news@FreeShell.org> - 2012-08-14 21:21 -0400
                Re: What gets secured by login password? Paul Sture <paul.nospam@sture.ch> - 2012-08-15 14:32 +0200
  Re: What gets secured by login password? dorayme <dorayme@optusnet.com.au> - 2012-08-12 10:44 +1000
  Re: What gets secured by login password? Alan Baker <alangbaker@telus.net> - 2012-08-12 15:07 -0700

csiph-web