title: Can someone steal a password from a Java application?
body: <p>Suppose there is a String variable that holds a plain text password.</p>
  
  <p>Is there any possibility of reading this password using a memory dump. (Suppose using cheat engine.) I am puzzled with this JVM thing. Does JVM provide some sort of protection against this. If no what are the practices that I need to use to avoid such "stealing".</p>
  
  <p>A practical threat would be a Trojan; that sends the segments of the memory dump to an external party.</p>