JREF Homepage Swift Blog Events Calendar $1 Million Paranormal Challenge The Amaz!ng Meeting Useful Links Support Us
James Randi Educational Foundation JREF Forum
Forum Index Register Members List Events Mark Forums Read Help

Go Back   JREF Forum » General Topics » Computers and the Internet
Click Here To Donate

Notices


Welcome to the JREF Forum, where we discuss skepticism, critical thinking, the paranormal and science in a friendly but lively way. You are currently viewing the forum as a guest, which means you are missing out on discussing matters that are of interest to you. Please consider registering so you can gain full use of the forum features and interact with other Members. Registration is simple, fast and free! Click here to register today.

Reply
Old 11th October 2003, 09:21 AM   #1
Colloden
You love me
 
Colloden's Avatar
 
Join Date: Oct 2001
Location: Hiding in your underwear drawer
Posts: 1,520
Auto complete for passwords

I have internet explorer 6 and XP Home, when I type in a user name it auto completes the password field for the JREF forum. This is rather insecure and I’m trying to turn it off, however it does not appear as a setting in Tools/Internet options or anywhere else that I can find.

Anyone know how to disable it ?
__________________
Sou, Sou, where for art thou Sou ?
Name sounds like the secret lair of the "Colon man." - caniswalensis
Lives alone in a cupboard and has no friends. Even the cupboard hates him. - JihadJane
AUUUUUUUUUHHH. -Wilhelm
Colloden is offline   Quote this post in a PM   Nominate this post for this month's language award Copy a direct link to this post Reply With Quote Back to Top
Old 11th October 2003, 09:44 AM   #2
evildave
Guest
 
Posts: n/a
Umm... don't use Interner Explorer.

You could try setting "Userdata persistence" to "Disable" in Internet Properties->Security->Custom Level

Of course, all the other settings relating to locally caching username and password entries are potentially insecure. Especially since IE is such a prevalent "standard" that reversing-engineering any of its encryption stuff is worthwhile to any 'c00l H@X0r d00d'.

O' course, letting a UBB forum store your username/password in a cookie is a "gift" to anyone whose website you visit that only asks for it.
  Quote this post in a PM   Nominate this post for this month's language award Copy a direct link to this post Reply With Quote Back to Top
Old 11th October 2003, 10:07 AM   #3
Colloden
You love me
 
Colloden's Avatar
 
Join Date: Oct 2001
Location: Hiding in your underwear drawer
Posts: 1,520
This does not seem to be a cookie issue, I have tried deleting them and logging in again, same effect. clearly the user name / password completion from IE stores them somewhere.
__________________
Sou, Sou, where for art thou Sou ?
Name sounds like the secret lair of the "Colon man." - caniswalensis
Lives alone in a cupboard and has no friends. Even the cupboard hates him. - JihadJane
AUUUUUUUUUHHH. -Wilhelm
Colloden is offline   Quote this post in a PM   Nominate this post for this month's language award Copy a direct link to this post Reply With Quote Back to Top
Old 11th October 2003, 10:23 AM   #4
davidhorman
Muse
 
Join Date: Oct 2001
Posts: 984
Tools->Internet Options->Content->Autocomplete->Clear passwords

David
davidhorman is offline   Quote this post in a PM   Nominate this post for this month's language award Copy a direct link to this post Reply With Quote Back to Top
Old 11th October 2003, 12:02 PM   #5
Colloden
You love me
 
Colloden's Avatar
 
Join Date: Oct 2001
Location: Hiding in your underwear drawer
Posts: 1,520
Thanks
__________________
Sou, Sou, where for art thou Sou ?
Name sounds like the secret lair of the "Colon man." - caniswalensis
Lives alone in a cupboard and has no friends. Even the cupboard hates him. - JihadJane
AUUUUUUUUUHHH. -Wilhelm
Colloden is offline   Quote this post in a PM   Nominate this post for this month's language award Copy a direct link to this post Reply With Quote Back to Top
Old 11th October 2003, 12:52 PM   #6
shanek
by Charles M. Schulz
 
shanek's Avatar
 
Join Date: Aug 2001
Posts: 15,990
Another great thing about Mozilla: Passwords and other sensitive information can be encrypted with a Master Password. No one can get at that information unless they know the Master Password.
__________________
"James Randi is awesome!" —Ian Bernard, primary host of Free Talk Live

"It really does take people like Penn & Teller or James Randi to be able to see through these deceptions, and so those are perhaps the people we should be paying the most attention to." —Harry Browne, 4/10/2004

I know there is a lesson to be learned here somewhere, but I don't know what it is.
shanek is offline   Quote this post in a PM   Nominate this post for this month's language award Copy a direct link to this post Reply With Quote Back to Top
Old 12th October 2003, 12:37 AM   #7
!Xx+-Rational-+xX!
! skeptiscientisuperioristism
 
Join Date: Aug 2003
Posts: 876
Anecdotal!
!Xx+-Rational-+xX! is offline   Quote this post in a PM   Nominate this post for this month's language award Copy a direct link to this post Reply With Quote Back to Top
Reply

JREF Forum » General Topics » Computers and the Internet

Bookmarks

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -7. The time now is 06:00 PM.
Powered by vBulletin. Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.
© 2001-2012, James Randi Educational Foundation. All Rights Reserved.

Disclaimer: Messages posted in the Forum are solely the opinion of their authors.