> I would like to know where is the password setted on the connection Dialog.
> If it remains after the client shutdown it must be in some place in the hard
> disk. I am afread about it. Can anyone tell me if someone can catch it
> (hacker) ?
It's stored in registry:
HKLM\Software\ODBC\ODBC.INI\<DSN name> in string value Password.
All the users with access to the computer can read it (don't forgot
the network registry access).
HKCU\Software\ODBC\ODBC.INI\<DSN name> in string value Password.
If everything is properly only the user and Admin can read it.
All the users with access to the file can read it.
P.S. The admin could change the default ACL on registry tree.
In response to
pgsql-odbc by date
|Next:||From: Ludek Finstrle||Date: 2007-01-22 11:52:05|
|Subject: Re: Password security [where is the password]|
|Previous:||From: Ezequias Rodrigues da Rocha||Date: 2007-01-20 18:43:33|
|Subject: Password security [where is the password]|