I've checked with four different email applications on the Palm Treo, as well as some available on the Blackberry, and none of them show the password as cleartext on the config screens. Sure, someone could conceivably hook up the device to a reader, perform a hex dump of the contents of the memory, and the passwords are probably visibly in there; but my point is that by the time this can be done, a user can change his password ---- as long as he knows how and when to change it! Giving him a password that is "just for email" doesn't necessarily make his "real" password more secure, because he can store that on the PDA just as well
Shannon Roddy wrote: > On 2/15/07, Tim Fournet <tfournet at tfour.net> wrote: > >> I doubt many devices actually store the passwords in an >> easy-to-access cleartext sort of way. >> > > > Umm... wrong answer. ;-) You'd be surprised. > > _______________________________________________ > General mailing list > General at brlug.net > http://mail.brlug.net/mailman/listinfo/general_brlug.net >
