Edge stores passwords in plaintext memory at startup; a tool has been released to test against the flaw.

  • Possibly linux@lemmy.zip
    link
    fedilink
    English
    arrow-up
    2
    ·
    12 days ago

    At some point they will need to be decrypted anyway

    I think this was done for performance and simplicity

    • Kogasa@programming.dev
      link
      fedilink
      English
      arrow-up
      2
      ·
      12 days ago

      Yep, and at that point they will be in memory until a reasonable time to clean up. But decrypting the whole password database and leaving it there forever seems needlessly unsafe.