<?xml version="1.0" encoding="UTF-8"?>
<!-- generator="bbPress/1.2" -->
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom">
	<channel>
		<title>Giveaway of the Day Forums &#187; Topic: Edge Stores Passwords In Plain Text - Easy For Malware To Grab</title>
		<link>https://www.giveawayoftheday.com/forums/topic/477990</link>
		<description>Giveaway of the Day Forums &#187; Topic: Edge Stores Passwords In Plain Text - Easy For Malware To Grab</description>
		<language>en-US</language>
		<pubDate>Sun, 07 Jun 2026 08:26:28 +0000</pubDate>
		<generator>http://bbpress.org/?v=1.2</generator>
		<atom:link href="https://www.giveawayoftheday.com/forums/rss/topic/477990" rel="self" type="application/rss+xml" />

		<item>
			<title>mikiem2 on "Edge Stores Passwords In Plain Text - Easy For Malware To Grab"</title>
			<link>https://www.giveawayoftheday.com/forums/topic/477990#post-605120</link>
			<pubDate>Wed, 06 May 2026 00:27:56 +0000</pubDate>
			<dc:creator>mikiem2</dc:creator>
			<guid isPermaLink="false">605120@https://www.giveawayoftheday.com/forums/</guid>
			<description><p>windowscentral[.]com/microsoft/microsoft-edge-will-load-all-your-passwords-into-memory-in-plaintext-but-microsoft-says-its-not-a-security-concern</p>
<p>Edge stores your passwords in system memory in the same format as a plain text file created in Notepad, making it easy for software to dump &#38; save the contents. Microsoft doesn&#39;t consider this a vulnerability worth fixing, because to actually grab those passwords someone would already have to have access to your PC/laptop, e.g., you&#39;d already have to be infected with some sort of malware (!). Of course there are different degrees of compromise -- malware with easier to gain user privileges can&#39;t steal as much or create as much havoc as malware running as admin., so you want to make it harder to do bad stuff &#38;/or harder to escalate to admin. privilege level. But apparently Microsoft takes the stance that any access means Game Over, you&#39;re on your own. And if that&#39;s their official stance, I guess it makes perfect sense to disable their driver blocklist, as installing a driver is rarely if ever the 1st step in an exploit. So why bother making sure that list is accurate?
</p></description>
		</item>

	</channel>
</rss>
