Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange
25 replaced http://security.stackexchange.com/ with https://security.stackexchange.com/
source | link
  1. Using the developer console, you can modify the web page to change this:

    <input type="password" name="pass" id="password"/>
    

    To this:

    <input type="text" name="pass" id="password"/>
    

    (Removed jQuery as suggested by Doyle LewisDoyle Lewis)

  2. We can also get the values through the console input: you can use a variation of these (F12 > Console > Enter input):

    • console.log($("#password").val()); (jQuery)
    • console.log(this.pass.val);
    • console.log(document.getElementById("password").value); (dom)
  3. Apparently Windows 8 and Windows 10 Enterprise have an "eye" icon that allows you to reveal the plain-text password when holding down the eye button. This becomes an even bigger threat when someone else can just click that one button, bypassing all of the effort used in the examples above.

  1. Using the developer console, you can modify the web page to change this:

    <input type="password" name="pass" id="password"/>
    

    To this:

    <input type="text" name="pass" id="password"/>
    

    (Removed jQuery as suggested by Doyle Lewis)

  2. We can also get the values through the console input: you can use a variation of these (F12 > Console > Enter input):

    • console.log($("#password").val()); (jQuery)
    • console.log(this.pass.val);
    • console.log(document.getElementById("password").value); (dom)
  3. Apparently Windows 8 and Windows 10 Enterprise have an "eye" icon that allows you to reveal the plain-text password when holding down the eye button. This becomes an even bigger threat when someone else can just click that one button, bypassing all of the effort used in the examples above.

  1. Using the developer console, you can modify the web page to change this:

    <input type="password" name="pass" id="password"/>
    

    To this:

    <input type="text" name="pass" id="password"/>
    

    (Removed jQuery as suggested by Doyle Lewis)

  2. We can also get the values through the console input: you can use a variation of these (F12 > Console > Enter input):

    • console.log($("#password").val()); (jQuery)
    • console.log(this.pass.val);
    • console.log(document.getElementById("password").value); (dom)
  3. Apparently Windows 8 and Windows 10 Enterprise have an "eye" icon that allows you to reveal the plain-text password when holding down the eye button. This becomes an even bigger threat when someone else can just click that one button, bypassing all of the effort used in the examples above.

24 updated
source | link
  1. Using the developer console, you can modify the web page to change this:

    <input type="password" name="pass" id="password"/>
    

    To this:

    <input type="text" name="pass" id="password"/>
    

    (Removed jQuery as suggested by Doyle Lewis)

  2. We can also get the values through the console input: you can use a variation of these (F12 > Console > Enter input):

    • console.log($("#password").val()); (jQuery)
    • console.log(this.pass.val);
    • console.log(document.getElementById("password").value); (dom)
  3. Apparently Windows 8 and Windows 10 Enterprise hashave an "eye" icon that allows you to reveal the plain-text password when holding down the eye button. This becomes an even bigger threat when someone else can just click that one button, bypassing all of the effort used in the examples above.

  1. Using the developer console, you can modify the web page to change this:

    <input type="password" name="pass" id="password"/>
    

    To this:

    <input type="text" name="pass" id="password"/>
    

    (Removed jQuery as suggested by Doyle Lewis)

  2. We can also get the values through the console input: you can use a variation of these (F12 > Console > Enter input):

    • console.log($("#password").val()); (jQuery)
    • console.log(this.pass.val);
    • console.log(document.getElementById("password").value); (dom)
  3. Apparently Windows 10 Enterprise has an "eye" icon that allows you to reveal the plain-text password. This becomes an even bigger threat when someone else can just click that one button, bypassing all of the effort used in the examples above.

  1. Using the developer console, you can modify the web page to change this:

    <input type="password" name="pass" id="password"/>
    

    To this:

    <input type="text" name="pass" id="password"/>
    

    (Removed jQuery as suggested by Doyle Lewis)

  2. We can also get the values through the console input: you can use a variation of these (F12 > Console > Enter input):

    • console.log($("#password").val()); (jQuery)
    • console.log(this.pass.val);
    • console.log(document.getElementById("password").value); (dom)
  3. Apparently Windows 8 and Windows 10 Enterprise have an "eye" icon that allows you to reveal the plain-text password when holding down the eye button. This becomes an even bigger threat when someone else can just click that one button, bypassing all of the effort used in the examples above.

23 correction. fixed image location. added alt text for accessibility.
source | link

You have to admit, given the circumstances, this seems like next-level tinfoil hattery. I can just picture a guy in a grey suit walking up to your desktop, looking for your 20+ GB virtual machine disk, plus accompanying configuration data within 20 secondsa couple minutes, and taking it to a seedy cubicle in the corner of the office, then madly brute-forcing while cackling maniacally:

enter image description hereDr. Evil laughing while brute-forcing OP

With the virtual machine, a colleague would have to copy the contents of your virtual hard-drive, plus the accompanying settings, and mount it. More than likely, this would be in excess of 20 GB. Copying this virtual drive in such a short time simply isn't going to happenwhile other people are around seems quite unlikely.

Someone will notice something.

Final result.

  1. Your corporation has WiFi access which requires your employee badge number and password to sign in.
  2. Malicious colleague logs onto the corporate network using your credentials, on an unauthorized device, and then wreaks havoc / steals things without it leading back to them. Most security policies should require device registration first, but there are unfortunately ways around that.
  3. You get blamed. It looks like you did it. And the spy who screwed things up may get away scott freethe spy who screwed things up may get away scott free.

You have to admit, given the circumstances, this seems like next-level tinfoil hattery. I can just picture a guy in a grey suit walking up to your desktop, looking for your 20+ GB virtual machine disk, plus accompanying configuration data within 20 seconds, and taking it to a seedy cubicle in the corner of the office, then madly brute-forcing while cackling maniacally:

enter image description here

With the virtual machine, a colleague would have to copy the contents of your virtual hard-drive, plus the accompanying settings, and mount it. More than likely, this would be in excess of 20 GB. Copying this virtual drive in such a short time simply isn't going to happen.

Final result.

  1. Your corporation has WiFi access which requires your employee badge number and password to sign in.
  2. Malicious colleague logs onto the corporate network using your credentials, on an unauthorized device, and then wreaks havoc / steals things without it leading back to them. Most security policies should require device registration first, but there are unfortunately ways around that.
  3. You get blamed. It looks like you did it. And the spy who screwed things up may get away scott free.

You have to admit, given the circumstances, this seems like next-level tinfoil hattery. I can just picture a guy in a grey suit walking up to your desktop, looking for your 20+ GB virtual machine disk, plus accompanying configuration data within a couple minutes, and taking it to a seedy cubicle in the corner of the office, then madly brute-forcing while cackling maniacally:

Dr. Evil laughing while brute-forcing OP

With the virtual machine, a colleague would have to copy the contents of your virtual hard-drive, plus the accompanying settings, and mount it. More than likely, this would be in excess of 20 GB. Copying this virtual drive in such a short time while other people are around seems quite unlikely.

Someone will notice something.

  1. Your corporation has WiFi access which requires your employee badge number and password to sign in.
  2. Malicious colleague logs onto the corporate network using your credentials, on an unauthorized device, and then wreaks havoc / steals things without it leading back to them. Most security policies should require device registration first, but there are unfortunately ways around that.
  3. You get blamed. It looks like you did it. And the spy who screwed things up may get away scott free.
22 cackle
source | link
21 rearrange thingies
source | link
20 rearrange thingies
source | link
19 added 2 characters in body
source | link
18 removed jQuery because it's just showing off. updated with tinfoil equip
source | link
17 removed jQuery because it's just showing off.
source | link
16 added 7 characters in body
source | link
15 more info. windows 10 enterprise blurb.
source | link
14 formatting to show different options.
source | link
13 added 38 characters in body
source | link
12 added 45 characters in body
source | link
11 added 147 characters in body; added 16 characters in body
source | link
10 oops... also, thanks Doyle. O'Doyle rules.
source | link
9 fixed a bunch of mistakes, added more info. PAY ATTENTION TO THE LAST PART
source | link
8 added 66 characters in body
source | link
7 deleted 32 characters in body
source | link
6 added 1 character in body
source | link
5 deleted 59 characters in body
source | link
4 added 50 characters in body
source | link
3 added 116 characters in body
source | link
2 added 28 characters in body
source | link
1
source | link