Re: Password security [where is the password]

From: Ludek Finstrle <luf(at)pzkagis(dot)cz>
To: Ezequias Rodrigues da Rocha <ezequias(dot)rocha(at)gmail(dot)com>
Cc: pgsql-odbc(at)postgresql(dot)org
Subject: Re: Password security [where is the password]
Date: 2007-01-22 06:26:12
Message-ID: 20070122062612.GB22535@soptik.pzkagis.cz
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-odbc

> I would like to know where is the password setted on the connection Dialog.
> If it remains after the client shutdown it must be in some place in the hard
> disk. I am afread about it. Can anyone tell me if someone can catch it
> (hacker) ?

It's stored in registry:
System DSN:
HKLM\Software\ODBC\ODBC.INI\<DSN name> in string value Password.
All the users with access to the computer can read it (don't forgot
the network registry access).

User DSN:
HKCU\Software\ODBC\ODBC.INI\<DSN name> in string value Password.
If everything is properly only the user and Admin can read it.

File DSN:
in file
All the users with access to the file can read it.

Regards,

Luf

P.S. The admin could change the default ACL on registry tree.

In response to

Responses

Browse pgsql-odbc by date

  From Date Subject
Next Message Ludek Finstrle 2007-01-22 11:52:05 Re: Password security [where is the password]
Previous Message Ezequias Rodrigues da Rocha 2007-01-20 18:43:33 Password security [where is the password]