05-07-2012, 02:30 PM #1Apple update exposes Lion login passwords in clear text
Apple update exposes Lion login passwords in clear text
OS X 10.7.3 contains a debug flag which makes system passwords readable, checks show. Depending on the system configuration, people who update to v10.7.3 may have a widely-viewable debug log file containing passwords for all users accessing a system. The passwords are stored in plain text, making for a potentially serious security risk....
05-07-2012, 02:34 PM #2
Does anyone actually know what file these passwords are stored in? I've read this story a few times and each and every one neglects to mention the path and name of the file.
05-07-2012, 06:31 PM #3
- Member Since
- Dec 08, 2009
- The same as Sheldon Cooper - East Texas
- iMac 2014 i5 5k 32gb 1tb fusion, second TB display, 2014 MBA
The reports are somewhat ambiguous and quote each other in an endless loop - in fact, most reports are just cut and paste from somewhere else. But from what I can see, it only affects a certain subset of machines using filevault, and then only a filevault from an older install of Snow Leopard.
I have grepped every log file, including everything in the huge DiagnosticMessage folder, on my machine (after a fresh login) and I find no tracks of a password in the log files.
Then I grepped the entire log folder itself for my password and nothing was found.
Still looking, but it appears that just a vanilla install of Lion (or SL) doesn't have the problem.
Ok. The problem is only for filevault uses who have upgraded to Lion, although the common press is yelling that OSX is an open door for anybody to enter.
By the way, for Unix/Linux guys and gals, OSX keeps two active log folders...
/var/log the usual place
username/Library/Logs the unusual place
05-07-2012, 06:40 PM #4
Users Browsing this Thread
There are currently 1 users browsing this thread. (0 members and 1 guests)
By OneMoreThing... in forum Apple Rumors and ReportsReplies: 1Last Post: 07-23-2011, 11:57 AM
By mbohn in forum OS X - Operating SystemReplies: 1Last Post: 10-13-2009, 06:48 PM
By youdin in forum OS X - Operating SystemReplies: 4Last Post: 03-15-2009, 06:42 AM
By agb in forum OS X - Apps and GamesReplies: 9Last Post: 04-04-2008, 02:29 PM
By Suzie68 in forum Switcher HangoutReplies: 25Last Post: 07-28-2007, 08:38 PM