[47470] in Cypherpunks
Re: A WfW security curiosity (possibly another security hole)
daemon@ATHENA.MIT.EDU (pgut01@cs.auckland.ac.nz)
Thu Jan 18 10:30:56 1996
Date: Fri, 19 Jan 1996 04:18:49 +1300 (NZDT)
From: pgut01@cs.auckland.ac.nz
To: gaffney@emba.uvm.edu
Cc: cypherpunks@toad.com
>>[WFWSYS.CFG file]
>
>This is the file used by admincfg.exe (on WFW3.11 disk 8). This file
>contains "security" settings, such as whether or not to cache passwords
>on disk (*.PWL files).
Ahh, so you can silently reenable password cacheing by manipulating this
file, thereby defeating Microsoft's "turn off password cacheing" kludge.
Wonderful. I'll have a poke around on Monday to figure out what bits to
flip and post the results here.
Thanks for the info...
Peter.
