n Thu, Feb 28, 2008 at 1:56 PM, Jacob Appelbaum <jacob@xxxxxxxxxxxxx> wrote: > Moin moin Bugtraq readers, > > Bill Paul and I have discovered that LoginWindow.app doesn't clear > credentials after a user is authenticated. This has already been discovered in 2004. While the author only looks at swap files, it is obvious that this is the same bug. http://seclists.org/bugtraq/2004/Jun/0417.html