jeudi 1 janvier 2015

grep -rf passfile.txt ~ for plaintext passwords in your home folder



I'm curious to find out what people find in their home folders for unencrypted passwords. Here's how:



  1. Create a txt file containing all of your passwords you know, one password per line

  2. grep -rf passfile.txt ~

  3. Let us know what comes up!


So far, for me, the only thing that comes up is ~/.purple/accounts.xml - This is pidgin storing account passwords in there. Great, that makes me feel secure! Apparently they got a list of excuses as to why. (*it boils down to cross-platform external keyring integration being a challenge)



  • other than that, try searches like grep -ri password or grep -ri pass in your home folder. Turns up the same goodies as the pass list for me.

  • Would be good to know if anyone else can think of anything else to grep out!





Aucun commentaire:

Enregistrer un commentaire