From: | Ludek Finstrle <luf(at)pzkagis(dot)cz> |
---|---|
To: | Ezequias Rodrigues da Rocha <ezequias(dot)rocha(at)gmail(dot)com> |
Cc: | pgsql-odbc(at)postgresql(dot)org |
Subject: | Re: Password security [where is the password] |
Date: | 2007-01-22 06:26:12 |
Message-ID: | 20070122062612.GB22535@soptik.pzkagis.cz |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-odbc |
> I would like to know where is the password setted on the connection Dialog.
> If it remains after the client shutdown it must be in some place in the hard
> disk. I am afread about it. Can anyone tell me if someone can catch it
> (hacker) ?
It's stored in registry:
System DSN:
HKLM\Software\ODBC\ODBC.INI\<DSN name> in string value Password.
All the users with access to the computer can read it (don't forgot
the network registry access).
User DSN:
HKCU\Software\ODBC\ODBC.INI\<DSN name> in string value Password.
If everything is properly only the user and Admin can read it.
File DSN:
in file
All the users with access to the file can read it.
Regards,
Luf
P.S. The admin could change the default ACL on registry tree.
From | Date | Subject | |
---|---|---|---|
Next Message | Ludek Finstrle | 2007-01-22 11:52:05 | Re: Password security [where is the password] |
Previous Message | Ezequias Rodrigues da Rocha | 2007-01-20 18:43:33 | Password security [where is the password] |