Microsoft SSH agent persistently stores your unencrypted private keys in the registry. They're still there unlocked and usable after you reboot.
does this company intentionally want users to stop using it? cuz day by day either theres a new windows bug or just shittier softwares
Our lives are in the hands of morons. What the fuck.
Everytime I read a Microsoft headline these days
Safety and security are foundational to Microsoft Edge. Access to browser data as described in the reported scenario would require the device to already be compromised. Design choices in this area involve balancing performance, usability, and security, and we continue to review it against evolving threats.
"We value user safety and usability, but if you're already compromised you can go fuck yourself"
2026 is gonna be the year I finally move to Linux. I have huge concerns about many aspects of switching, but they're being overtaken by concerns about staying with Windows. I don't even mind if my overall user experience is a bit worse on Linux (I am trying to have reasonable expectations that it won't be the walk in the park Linux advocates on Lemmy like to claim), I just have much more faith in its security, privacy, customisability and - most importantly - the motivations and intentions of its developers.
HOLY @#%^ WHAT IN THE @#%^ DO THEY MEAN "NOT TO WORRY"?????????????????
This is sort of like saying "I leave my valuables in plain sight by my door because it has a lock on it and door locks are trustworthy." I'm not super into cyber security and stuff but it seems like one of the most common problems is programs managing to get access to memory they shouldn't have access to. It seems to happen all the time! Just like many locks for you door are trash.
"Yeah totally secure! Just trust me!.." basically
This is LITERALLY isn't secure; they should atleast make it encrypted. This is just the same as using your notes app as password manager! But it's microsoft, and they're willingly giving your bitlocker encryption key to the FBIs for your drives. So I'm not surprised..
Access to browser data as described in the reported scenario would require the device to already be compromised.
Yes you can open our safe with just a good yank but if a thief can do that they’re already in your house.
Microsoft - So secure we ROT13 encode everything... TWICE!
I don’t worry, I just don’t use Edge or Windows or any MS software really (except for Teams at work)
Nothing in this timeline surprises me any more.
They say not to worry because they know nobody uses that dumpster fire of a browser so there's no actual risk of your passwords being leaked since you're not using it anyways.
And this is why you don't give microslop anything
phew it’s an expected feature, thank goodness!!!
if they patch this, they should be dragged through the town square after that comment
You guys are using edge?
This is why gamers should reject kernel anti cheats. A single dev at a single company that requires one could read them as easily as any other file. I'm not exaggerating, unless I'm misinformed
Wow, that's bad.
Trust me bro
M365 chat also fetches a copy of whatever secured file links you send to each other. Goes without saying, but never use Microsoft products if you value security.
How will the NSA spy on you if Microsoft doesn't hand them your passwords?
Eh. To be honest it indeed does not matter much. Scanning your RAM for passwords is much harder than simply reading them off the browsers files. Sure, it is encrypted and the key is not necessarily on your computer, but remember that if the software can decrypt your passwords without you inputting a password or similar, then anything with access to your device can as well.
Don't use your browser's password manager.
Moms insists on pen an paper! Omg!
Fuck Microslop Fuck windows 11
Btw, don't ever copy&paste from your password manager, if that's a problem. That's what memory protection mechanisms in hardware and software are for.
The problem is, the weird way it is implemented in Edge and how MS handles the issue.
What is even the point of the DPAPI?
How can a company manage to be so bafflingly incompetent and why are there people out there still standing for it.
don't worry bb
I haven't used a Microsoft browser or operating syatem in almost 25 years.
.... They are so bad
top 97 comments