|Date:||May 4, 2005 / year-entry #112|
|Summary:||Sometimes people ask for features that are such blatant security holes I don't know what they were thinking. Is there a way to get the current user's password? I have a program that does some stuff, then reboots the system, and I want to have the current user's password so I can log that user...|
Sometimes people ask for features that are such blatant security holes I don't know what they were thinking.
(Sometimes they don't bother explaining why they need the user's password; they just ask for it.)
Imagine the fantastic security hole if this were possible. Anybody could write a program that steals your password without even having to trick you into typing it. They would just call the imaginary
Even if you didn't want the password itself but merely some sort of "cookie" that could be used to log the user on later, you still have a security hole. Let's call this imaginary function
This is just a thinly-disguised
<-- Back to Old New Thing Archive Index