Black Hat Convention: Windows password Storage mechanism vulnerabilities

At the Las Vegas Defcon hacking Conference, security personnel unveiled some questions about the security of Windows operating systems, and hackers found that "cloud passwords" stored in Network tools such as Web browsers and im can be easily retrieved by computer forensics tools, including Facebook, Gmail accounts. This means that if your Windows notebook computer is stolen, you should consider replacing all passwords.

Hackers explain that the problem is mainly in Windows provided by the built-in data encryption Api--dpapi, which allows applications to invoke the programming interface to achieve scattered data encryption, but the hacker team provides open source tools Owade can easily in Ubuntu, The Web browser and instant Messaging client password information is extracted from Debian.

A Microsoft representative said the company would respond openly to the issue later today.

In addition, hackers also found that the Wi-Fi network password is also very fragile to save, Firefox offline Security is also worse, and in the IM software Skype password security is strong enough, difficult to get, some third-party im software such as 9talk, Pidgin, and other problems are more obvious.

How do you solve this problem? Only by using the disk encryption technology of Windows can you avoid the damage to your account, but it is rare for anyone to do so.

(Responsible editor: admin)