[2450] in Kerberos
Re: Why zero out key variables?
daemon@ATHENA.MIT.EDU (Steve Lunt)
Wed Dec 9 17:10:50 1992
Date: Wed, 9 Dec 92 16:48:10 EST
From: Steve Lunt <lunt@ctt.bellcore.com>
To: kerberos@Athena.MIT.EDU
Another good reason for zeroing out this space is that otherwise, if
the program dumped a core file, it might contain the user's long-term
key (and possibly his password, as well). These core files (often
readable by others) would be the first thing a hacker would look
(using dbx).
-- Steve
