🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.os.os2
Article #1435

Security leak in MS-Windows!

#1435
From: Bernhard Rosenkraenzer
Date: Tue, 14 Mar 1995 11:32
39 lines
2777 bytes
Another advantage of OS/2 in comparison to MS-Windows and Windows 95:

I've just discovered that the operating system MS-Windows has a security  
leak that allows a programmer to get passwords required for almost every  
program that runs with Windows.

You do it this way:

Every time Windows opens or closes a window, a CBT (Computer Based  
Training) function is called. You can hook this message using  
SetWindowsHook().

Most programs that ask for passwords (MS-Word (opening protected files),  
MS-Access 2.0, etc.) use a dialog box to ask for the password.

In a CBT function, you can register the opening of any window having  
"Password" or "Code" in the title bar (or whatever the title of the  
program you're trying to get into is, and save the window's ID.

When the window closes (detectable by the saved ID), you can save the  
content of all child windows (like the EditBox for the Password!).

If you need some code to demonstrate the mechanism (it works perfectly for  
MS-Word 6.0 (German version) and MS-Access 2.0), send mail to  
BERO@Flash.gun.de.


StarFleet Admiral Bero,
currently commanding the starship U.S.S. Tawern, NCC-54456
                                        _
.-----________________--_   ________.--'-`--._____
 \____==================_)  \_'===================`
        _,--___.-|__|-.______|=====/  `---'
        `---------._  USS - Tawern|
                    `-._ -  -  - ,'
                        \_____,-'

e-mail: BERO@Flash.gun.de
## CrossPoint v3.02 ##
Technical Details
Message-ID: <5hpY8YjFq0B@p0000021.flash.gun.de>
Path: arc1-ca.pugleaf.net!bga.com!news.sprintlink.net!howland.reston.ans.net!gatech!udel!news.mathworks.com!uunet!news.gun.de!gtnduss1.du.gtn.com!ius.gun.de!flash.gun.de!BERO

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: f69fe,1b64f2ee9872c186,start
X-Google-Attributes: gidf69fe,public
X-Google-Thread: 1160f1,1b64f2ee9872c186,start
X-Google-Attributes: gid1160f1,public
X-Google-Thread: 114b37,1b64f2ee9872c186,start
X-Google-Attributes: gid114b37,public
X-Google-Thread: 1138ec,1b64f2ee9872c186,start
X-Google-Attributes: gid1138ec,public
X-Google-ArrivalTime: 1995-03-16 09:39:31 PST
Lines: 39
Newsgroups: comp.os.os2,comp.os.os2.advocacy,fido.ger.os2,de.comp.os.os2
Message-ID: <5hpY8YjFq0B@p0000021.flash.gun.de>
From: BERO@flash.gun.de (Bernhard Rosenkraenzer)
Path: arc1-ca.pugleaf.net!bga.com!news.sprintlink.net!howland.reston.ans.net!gatech!udel!news.mathworks.com!uunet!news.gun.de!gtnduss1.du.gtn.com!ius.gun.de!flash.gun.de!BERO
Organization: United Federation of Star Trek Writers (UFSW)
Subject: Security leak in MS-Windows!
Date: Tue, 14 Mar 1995 12:32:00 +0100
X-Mailer: CrossPoint v3.02 via [DOS/NCBMail V2.11a REL.:050395]
X-Gateway: ZCONNECT UX ius.gun.de [UNIX/Connect v0.71]
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 8bit
X-Z-Post: Bernhard Rosenkraenzer; Auf der Hard 3; 54456 Tawern; Germany
X-Z-Telefon: V+49-6501-14202