Microsoft Edge loads your passwords into memory in plaintext, but Microsoft says not to worry
www.windowscentral.com
A security researcher has discovered that Microsoft Edge will load all your stored passwords into memory in plaintext at startup, making it easy for malware to scrape those passwords.
  • Morphit @feddit.ukEnglish
    24·
    12 days ago

    Didn’t Microsoft insist on TPMs for Win11? Isn’t the whole point of them to hold keys out of system memory?

  • edgemaster72@lemmy.worldEnglish
    6·
    12 days ago

    Cyber security researcher @L1v1ng0ffTh3L4N posted about the exploit on X, and says “Edge is the only Chromium‑based browser I’ve tested that behaves this way.”

    So not only does it do this, but Microslop went out of their way to create this behavior on purpose

  • FreedomAdvocate@lemmy.net.auEnglish
    35·
    12 days ago

    This really isn’t an issue. If someone is already on your computer and logged in, you are fully compromised already. If the passwords are stored in your browser then they can use those passwords to change your passwords as well.

    Storm in a teacup, but “Microsoft bad” so this will do well here.