in a 10+ people team we access the same ubuntu VM and we 'su' to the same user. On that user we make use of git-credential-cache feature to not type our personal password again and again.
As all password are stored using the socket owned by the same user, can a simple program retrieve all plaint text passwords? If yes, any pointers on how to demonstrate it?
If yes, we should definately change the way we cache passwords (a session token would be fine for us).