Password theft from memory?

[RW]

On Tue, 26 Apr 2011 10:48:53 +0100
Bruce Cran <bruce at cran.org.uk> wrote:

> On Mon, 25 Apr 2011 23:29:08 +0100
> RW <rwmaillists at googlemail.com> wrote:
> 
> > The reason I thought that heap memory isn't zeroed is from the
> > discussion of pre-zeroed pages in this article: 
> 
> There's an idlezero task that runs by default (via
> the vm.idlezero_enable sysctl), zeroing unused pages,

That's pretty much what the article is describing. It's actually *off*
by default in 8.2 because it causes lock-ups.