Printable View
I wanted to see how "1514" looks after encrypting it with MD5 algorithm. So I opened the Cain and Abel to use its Hash Calculator. To my surprise I saw my gmail account user name and password stored in clear text in Cain's password storage tab.
What are the possiblities...Is Google storing the passwords in clear text or Cain cracked it for me or its a problem with IE(which I used).
Please see the image I attached.
From the image you uploaded, it looks like this is more a problem with IE. In the type column, it says the source was Interet Explorer Protected Sites.
IE stores 95% of it's information in plain text, and the other 5% in half-hearted encryption that can be broken by simple 3rd party decryption programs.
Hence, no using IE to remember passwords FOR you.
If you'd like, I'll remember your passwords for you. Just pm them to me. This way you don't have to deal with IE storing them in plain text ;).
As guardian alpha said, the problem is IE and not Google.
Actually, I'll take issue with that.... it's not IE that's the problem it's the user who asks the computer to remember a password for him..... That's the problem.... But then again, if you can't remember your password you probably don't have a **** load worth keeping safe from other people..... :rolleyes: So there really isn't an issue is there?Quote:
As guardian alpha said, the problem is IE and not Google.
Ahh, but it's still IE's fault for allowing the user to BE stupid enough to allow it to store passwords plaintext. Nowadays it's the company's job to watch out for the retarded Lusers out there.Quote:
Originally posted here by Tiger Shark
Actually, I'll take issue with that.... it's not IE that's the problem it's the user who asks the computer to remember a password for him..... That's the problem.... But then again, if you can't remember your password you probably don't have a **** load worth keeping safe from other people..... :rolleyes: So there really isn't an issue is there?
My intension was to alert those newbies(like me) who store their passwords with IE(sucks).
anyways thanks for your replies.
Take a look at Password Safe, a rock solid password storage/encryption program that does a damn fine job of cleaning up it's own memory space and other common poor programming issues. It's from some of the folks at Counterpane, including cryptography guru Bruce Schneier. I use it religiously.Quote:
Originally posted here by gess~da~devil
My intension was to alert those newbies(like me) who store their passwords with IE(sucks).
anyways thanks for your replies.
Oh, and turn off that damned IE password storage, otherwise the temptation is too strong. I know...I speak from experience.
Gess:
Having re-read what I wrote I would like to say that, while it may seem so, my intent was not to imply that you were at fault for asking IE to save your password... It was a general comment. My aplogies if you took it wrongly... My bad....
I don't see what the big deal is. If you're at home I would hope you can trust your family enough to either not look at your passwords stored in plain text or not do anything with them. If you're at work, or anywhere else public, you're just an idiot to have a program store your password for you. Survival of the fittest! :p
I'd rather have IE remember my password then having it as a sticky on my monitor.
Now that's plain text :)
Tsk, tsk. I'm going to have to bust a shoe off in your arse. Why don't you leave your CC numbers on your home PC too. Think about how botnets work (as just one example). Think about what information is gathered from home users (the majority of where this info is glommed from) and reported back to the C&C server. You're lucky I'm in a good mood or I'd have to release the neg-u-lator 3000 on you. Contrats, you have achieved end user status with me.Quote:
I don't see what the big deal is. If you're at home I would hope you can trust your family enough to either not look at your passwords stored in plain text or not do anything with them. If you're at work, or anywhere else public, you're just an idiot to have a program store your password for you. Survival of the fittest!
--TH13
He He :)
TH13, I love the semi-foul mood your in!
Also something to point out, don't f*&$n' make all your passwords the same. Sure it helps to remember them all, but as soon as one is comprimised, all will be.
There's nothing that pisses me off more then people here at work that I have to reset their passwords because it isn't their "current" one and they forgot what the old one was.
Also, password reminders! Dammit, that item is to remind you of the password, not a place to write some useless crap.... If your password is "dell123" then your reminder should be "my computer brand + 123" or the likes. (Also note: don't make it that obvious that others can figure it out....)
Sorry for that, my little frustrated rant....
My Sincere thanks to zencoder for bringing 'Password safe' to my knowledge. CheersQuote:
Take a look at Password Safe, a rock solid password storage/encryption program that does a damn fine job of cleaning up it's own memory space and other common poor programming issues. It's from some of the folks at Counterpane, including cryptography guru Bruce Schneier. I use it religiously.
You were right, it doQuote:
damn fine job of cleaning up it's own memory space and other common poor programming issues.
Regarding AO, can anybody help me how to change the title of thread. I must change it ASAP if possible. It more related with Microsoft than Google. Am I right...
Bring it on ;). Should these bots have access to my machine? I guess I see your point, cause you never know, so you're safer not having that type of information on your machine. We shouldn't have to worry about these things :(.Quote:
Originally posted here by thehorse13
Tsk, tsk. I'm going to have to bust a shoe off in your arse. Why don't you leave your CC numbers on your home PC too. Think about how botnets work (as just one example). Think about what information is gathered from home users (the majority of where this info is glommed from) and reported back to the C&C server. You're lucky I'm in a good mood or I'd have to release the neg-u-lator 3000 on you. Contrats, you have achieved end user status with me.
--TH13
/me goes on an ethics crusade.