❗️🚨 Microsoft Edge keeps every saved password in process memory as cleartext from the moment it launches. Microsoft's responsed when reported: "by design."
All of them. Including credentials for sites you won't open this session.
Researcher @L1v1ng0ffTh3L4N tested every major Chromium browser. Edge is the only one that behaves this way.
Chrome decrypts credentials on demand, and App-Bound Encryption locks the keys to an authenticated Chrome process so other processes can't reuse them.
In Chrome, plaintext surfaces only during autofill or when a password is viewed, making memory scraping far less useful.
What makes this extra weird is that Edge still demands re-authentication before revealing those passwords in its Password Manager UI, while the same browser process already holds every one of them in plaintext.
In shared environments, this turns into a credential harvest. On a terminal server, an attacker with admin rights can read the memory of every logged-on user process. In the published PoC video, a compromised admin account lifts stored credentials from two other logged-on (and even disconnected) users with Edge running.
Microsoft's official response when notified: "by design."
The finding was disclosed April 29 at BigBiteOfTech by PaloAltoNtwks Norway, alongside a small educational tool that lets anyone verify the cleartext storage for themselves.
So a federal count just blocked a merger between JetBlue and Spirit Air, at the request of the Biden Administration.
Give me 3 minutes to explain why this is such a big deal, and why it's part of a bigger strategy to finally return power to regular people.
70% think AI will lead to fewer jobs.
They are right.
We can’t allow a handful of billionaires, eager to increase their wealth and power, to rush forward with a technology that will fundamentally transform humanity without democratic input or accountability.
KPMG is making waves 😳
Deloitte is sending 8 year senior associate Walter Lindell Jr. to KPMG for 1 batch of Summer Interns and 2 Marketing Cloud Technical Leads.
Story reported first by For The Dads.
I know everyone is high on this Sonny Styles guy —but my only knock on him is that he didn’t have a Pick-6
Every great college linebacker has an interception they took back to the house
California is closely monitoring the evolving situation in Iran and the surrounding region. Our homeland security and emergency management teams are working with federal partners to prepare for any impacts here at home.