Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 24 Apr 2011 11:10:33 -0600
From:      Modulok <modulok@gmail.com>
To:        FreeBSD Questions <freebsd-questions@freebsd.org>
Subject:   Password theft from memory?
Message-ID:  <BANLkTimJWAxW_4OmoeBQrvDDLjD-5Vr5hQ@mail.gmail.com>

next in thread | raw e-mail | index | archive | help
I don't know if this is a problem on FreeBSD...

Process A requests memory.
Process A Stores a plaintext password in memory or other sensitive data.
Process A terminates and the memory is reclaimed by kernel.

Process B requests a *huge* chunk of memory.
Process B crawls the uninitialized memory, looking for ProcessA's previously
stored password.

Does anyone know if this is even possible on FreeBSD?

Thanks!
-Modulok-



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?BANLkTimJWAxW_4OmoeBQrvDDLjD-5Vr5hQ>