Vue normale

Microsoft Edge Stores Passwords In Plaintext In RAM

Par : BeauHD
6 mai 2026 à 23:00
Longtime Slashdot reader UnknowingFool writes: Security researcher Tom Joran Sonstebyseter Ronning has found that Microsoft Edge stores passwords in plaintext in RAM. After creating a password and storing it using Edge's password manager, Ronning found that he could dump the RAM and recover his password which was stored in plaintext. Part of the issue is Edge loads all passwords to all sites upon a single verification check, even if the user was not visiting a specific site. This is very different from Chrome, which only loads passwords for specific websites when challenged for the site's password. Also, Chrome will delete the password from memory once the password has been filled. Edge does not delete the passwords from memory once they are used. Microsoft downplayed the risk noting access would require control over a user's PC like a malware infection: "Access to browser data as described in the reported scenario would require the device to already be compromised," Microsoft said. Ronning countered that it was possible to dump passwords for multiple users using administrative privileges for one user to view the passwords for other logged-on users. "Design choices in this area involve balancing performance, usability, and security, and we continue to review it against evolving threats," Microsoft said. "Browsers access password data in memory to help users sign in quickly and securely -- this is an expected feature of the application. We recommend users install the latest security updates and antivirus software to help protect against security threats."

Read more of this story at Slashdot.

You're not going to the moon, but NASA's tests show your camera could

three cameras are placed against a textured blue background
Camera images: Nikon and Canon

It's no secret that NASA is careful about the technology it uses on missions, including anything camera-related. After all, space is the epitome of an extreme environment, and it's important to perform thorough testing to ensure devices can function despite those challenges. A recently surfaced NASA presentation, highlighted by Digital Camera World, provides a glimpse at that process.

The 2022 presentation, titled "Handheld Camera (HHC) Initial Test Results," is available through NASA's Technical Reports Server and evaluates the performance of the Canon EOS R5, Nikon D6 and Nikon Z7II in a vacuum chamber that could also heat and cool the cameras. The presentation includes images of the testing procedures and details how the team performed the tests. It's worth noting that the team clarifies that the Nikon Z9 was not available during the thermal-vacuum testing period.

a slide from a presentation that has a photo of cameras in a chamber with text explaining

A slide from the presentation detailing parts of the testing procedure.

Slide: Jonathan E Pryor, Marshall Space Flight Center

The headline result is that the Canon R5 and Nikon D6 both survived vacuum testing and operated across a temperature range of -30°C to +40°C (-22°F to +104°F), with NASA noting that the two cameras showed "similar operational characteristics" across that range. It's important to note, too, that these were unmodified, off-the-shelf versions of those cameras. It turns out stock cameras are tougher than you may have assumed.

Before testing, the cameras and supporting hardware were heated to 50°C (122°F) for 72 hours in a process known as a bakeout, which helps drive off volatile materials before equipment is placed in a vacuum chamber. The cameras were then placed inside a temperature-controlled enclosure within the chamber, while Wi-Fi and Bluetooth were used to control image and video capture.

a chart of testing results

The slide detailing the results of some of the testing.

Slide: Jonathan E Pryor, Marshall Space Flight Center

The cameras were tested in both stills and video modes, though the D6 didn't undergo the same full set of video tests as the R5. In the hotter video tests, the R5 recorded until it overheated and shut itself down, then was given five-minute cool-down periods before testing continued. The researchers did not perform the second and third D6 video tests out of concern that it might lose connection in the same way as the Z7II (detailed below). Even so, NASA's results suggest both the R5 and D6 were usable in the chamber, with the caveat that the D6's video performance was not explored as extensively.

The Nikon Z7II, meanwhile, did not complete the same full temperature range. The presentation says it worked at ambient temperature, but under near-vacuum conditions, it lost connection after recording video and could not reconnect. The camera didn't outright fail, but a device used in space needs to be able to be reliably controlled, especially if there are plans for remote operation.

a slide from a presentation with a blue and orange bar graph

Details of the stills performances of the R5 and D6.

Slide: Jonathan E Pryor, Marshall Space Flight Center

Another practical problem that the test highlights: remembering to turn Raw files on. The D6 was set up to capture both Raw and JPEG images, and the R5 was supposed to be the same. Unfortunately, the presentation calls out that the "setting was missed during setup process," so it only recorded JPEGs. Next time you discover after a shoot that your camera was set to JPEG only, just remind yourself that even NASA researchers do that.

In addition to camera testing, the deck also includes radiation testing of four CFexpress card brands: Lexar, SanDisk, ProGrade and Sony. SanDisk showed the best result in NASA's calculations, but the presentation strongly warns that the outcome depends on the exact test setup and amount of radiation used, and should not be treated as a buying recommendation. None of the cards completely failed; NASA says temporary radiation-related errors were resolved by power cycling the cards.

a slide from a presentation about camera modification for a lunar camera

A slide from the 2024 presentation detailing camera modifications.

Slide: Parker Weide

The 2022 presentation is especially interesting in light of NASA's later work on a dedicated lunar camera. In 2024, NASA published a paper on testing a modified commercial camera for lunar environments. It concludes that the camera and its thermal protection system continued to function under most simulated conditions, but highlights issues such as LCD screen ghosting and overheating in extreme environmental conditions. NASA has since said its Handheld Universal Lunar Camera, or HULC, is based on a modified Nikon Z9 with Nikkor lenses, a protective thermal blanket, modified electronics and a custom grip designed for astronauts wearing spacesuit gloves.

Bayern Munich-PSG : le résumé de la qualification haletante des Parisiens, finaliste de la Ligue des champions pour la seconde saison consécutive

Repris en fin de rencontre en Bavière (1-1), le Paris Saint-Germain a pu profiter de son avantage décroché à l’aller (5-4) pour se qualifier en finale de la Ligue des champions. Les Parisiens y défendront leur titre face à Arsenal, le 30 mai à Budapest.

© Angelika Warmuth/REUTERS

Luis Enrique, l’entraîneur espagnol du PSG, célèbre la qualification de son équipe pour la finale de la Ligue des champions, après le match nul des Parisiens sur la pelouse du Bayern Munich (1-1), à l’Allianz Arena, à Munich, le 6 mai 2026.

Sébastien Lecornu appelle ses troupes à « l’unité » après les frictions autour du 1er-Mai

Ministres et députés Renaissance, MoDem, Horizons, LR et Liot étaient conviés à Matignon en fin d’après-midi, une semaine après plusieurs polémiques au Parlement.

© STEPHANE DE SAKUTIN/AFP

Le premier ministre français, Sébastien Lecornu, à l’Assemblée nationale, à Paris, le 6 mai 2026.
❌