¿Quién necesita hackers...

...teniendo a Microsoft?

Una grandiosa feature presente en el Internet Explorer desde el 2004. Si se usa Internet Explorer como cliente ftp, el usuario y contraseña utilizados se almacenan en el fichero. Al salvarlo (File -> Save As...), usuario y contraseña se muestran en claro en el fichero, a la vista de todo aquél que quiera verlo.

Esto dice Microsoft al respecto:

"Essentially, IE is designed to support FTP for convenience, but not to be a full-featured FTP client, which is why we include a separate FTP client in the operating system," wrote Christopher, a researcher with the Microsoft Security Response Center. "The reason IE includes the user name and password in saved files is because they are part of the URL. IE saves the URL in downloaded files so it can run them in an appropriate security zone at a later time, even though they are now located on the local system."

Afortunadamente, para Secunia no se trata de ningún problema serio. Me quedo más tranquilo.