Oracle Database Discussions

Dear DBAs,

A new free software found on internet and used to take a memory dump to a text file.

While this software is running and when we use any software, like sqlplusw, sqldeveloper, or any application, to connect to the database, this software (after taking a memory dump) is able to detect the password and show it in a clear text; in addition, the same appears in case you are trying to login to hotmail (for example).

Note that when using the sqlplus (DOS-command line) the password will not be detected.

Do anyone have an idea about how to avoid such weakness ?

Regards
Elie