| From: | Ludek Finstrle <luf(at)pzkagis(dot)cz> |
|---|---|
| To: | Ezequias Rodrigues da Rocha <ezequias(dot)rocha(at)gmail(dot)com> |
| Cc: | pgsql-odbc(at)postgresql(dot)org |
| Subject: | Re: Password security [where is the password] |
| Date: | 2007-01-22 06:26:12 |
| Message-ID: | 20070122062612.GB22535@soptik.pzkagis.cz |
| Views: | Whole Thread | Raw Message | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-odbc |
> I would like to know where is the password setted on the connection Dialog.
> If it remains after the client shutdown it must be in some place in the hard
> disk. I am afread about it. Can anyone tell me if someone can catch it
> (hacker) ?
It's stored in registry:
System DSN:
HKLM\Software\ODBC\ODBC.INI\<DSN name> in string value Password.
All the users with access to the computer can read it (don't forgot
the network registry access).
User DSN:
HKCU\Software\ODBC\ODBC.INI\<DSN name> in string value Password.
If everything is properly only the user and Admin can read it.
File DSN:
in file
All the users with access to the file can read it.
Regards,
Luf
P.S. The admin could change the default ACL on registry tree.
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Ludek Finstrle | 2007-01-22 11:52:05 | Re: Password security [where is the password] |
| Previous Message | Ezequias Rodrigues da Rocha | 2007-01-20 18:43:33 | Password security [where is the password] |