IP: Freeware app to retrieve passwords from Internet Explorer: [risks] Risks Digest 21.56

[David Farber <dave () farber net>]

> Date: Mon, 23 Jul 2001 22:24:15 -0400 (EDT)
> From: "Lyle H. Gray" <gray () cs umass edu>
> Subject: Freeware app to retrieve passwords from Internet Explorer
>
> The following item appeared in the "Download This" section of the
> Earthlink Weekly Email Newsletter on 07/23/2001:
>
> * Windows: Password Recovery
> http://www.iopus.com/password_recovery.htm
> If you tell your browser to save Web site passwords so that you
> don't have to reenter them, you might forget those passwords over
> time. This program can reveal the passwords hidden behind those
> asterisks in Web site login screens. (Freeware)
>
> This item highlights an inherent risk of allowing IE to save your passwords
> (other than the obvious one that anyone with physical access to your system
> would also have access to your password-protected pages): Someone with
> access to your system may be able to determine a pattern to your password
> choices (especially if you only have one password...)
>
>   [and also to use your IE passwords directly while masquerading...  PGN]



For archives see: http://www.interesting-people.org/