Home page logo
/

fulldisclosure logo Full Disclosure mailing list archives

Re: Filezilla's silent caching of user's credentials
From: coderman <coderman () gmail com>
Date: Thu, 21 Oct 2010 23:51:08 -0700

On Sat, Oct 16, 2010 at 7:52 PM, dave b <db.pub.mail () gmail com> wrote:
...
This is always an issue... how do you keep passwords?

you wrap the foundation in FDE with secure bootloader. <insert discuss
the complex trade-off's of this tangent to mutual satisfaction.>

add a dash of privileged key memory representation manangement to seed
the application / domain level password authorized key utilization
within distinct. bonus points for capabilities model or well executed
rule base.

crypted qubes with elegant structure of key management is beauty.
alas, key management is always crux and bleeds you... pick your
reactive or proactive blood letting wisely.


... or ball point pen on personage.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]