isn't it at risk of any code pathway that somehow allows you exceed a buffer and... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		keithnz 26 days ago \| parent \| context \| favorite \| on: Microsoft Edge stores all passwords in memory in c... isn't it at risk of any code pathway that somehow allows you exceed a buffer and read memory unbounded? Then a nefarious web page could capture that? That's a huge exposure surface.

Dylan16807 26 days ago [–]

I'm pretty sure a read exploit in a web page wouldn't be in the same process as the passwords.

If you can cross over to the main Edge process, you can probably get it to remove any encryption it applied itself.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact