Password fields "revealing" problem

1 Aug 2006 11:12 PM

csmba

Has anyone noticed that even the .NET 2.0 windows forms (not sure ASP)
password field is vulnerable to the "password revealing" problem? To be
clear, I refer to the fact that it is easy to run a free program that simply
takes the field showing the asterisks, and showing you the password behind
it.

If Microsoft solved this problem in their own applications, why didn't they
solve it for this commonly used control?

Any tips on best workarounds?

thanks

2 Aug 2006 8:09 AM

Dominick Baier

Hi,

simply don't fill the password fields - after someone entered something,
immediately clear them and fill them with placeholder characters.

dominick

Show quoteHide quote

> Has anyone noticed that even the .NET 2.0 windows forms (not sure ASP)
> password field is vulnerable to the "password revealing" problem? To
> be clear, I refer to the fact that it is easy to run a free program
> that simply takes the field showing the asterisks, and showing you the
> password behind it.
>
> If Microsoft solved this problem in their own applications, why didn't
> they solve it for this commonly used control?
>
> Any tips on best workarounds?
>
> thanks
>