Windows 8 stores logon passwords in plain-text

#1

Post by cschramm » Fri, Oct 12, 2012, 8:03 PM UTC

Windows 8 stores logon passwords in plain-text
passcape.com

Re: Windows 8 stores logon passwords in plain-text

#2

Post by teovall » Fri, Oct 12, 2012, 8:24 PM UTC

The phrase "stored in plain text" does not mean anything near the same thing as "encrypted with AES in the Windows Vault using the Data Protection API". This story is complete hogwash.

Re: Windows 8 stores logon passwords in plain-text

#3

Post by IanDrake » Fri, Oct 12, 2012, 8:48 PM UTC

teovall wrote: post #2

The phrase "stored in plain text" does not mean anything near the same thing as "encrypted with AES in the Windows Vault using the Data Protection API". This story is complete hogwash.

I'm thinking the same thing. These aren't website passwords, they need to be recoverable by an administrator. I'm sure this is by design.

Re: Windows 8 stores logon passwords in plain-text

#4

Post by viraptor » Fri, Oct 12, 2012, 9:01 PM UTC

IanDrake wrote: post #3

teovall wrote: post #2

The phrase "stored in plain text" does not mean anything near the same thing as "encrypted with AES in the Windows Vault using the Data Protection API". This story is complete hogwash.

I'm thinking the same thing. These aren't website passwords, they need to be recoverable by an administrator. I'm sure this is by design.

Why do you think they should be recoverable by anyone? You can verify your details against a hash, or reset them anyway.