>Damn, how is that possible? I imagine you have FileVault enabled, and if so this sounds like some security bypass?
If you're choosing "reboot" rather than "shut down", presumably you intend to continue using the machine, so it's reasonably safe to keep credentials around. AFAIK windows has the same feature.
> If you're choosing "reboot" rather than "shut down", presumably you intend to continue using the machine, so it's reasonably safe to keep credentials around.
This is the last thing I would expect. Quite the contrary, when I reboot (rather than log out or sleep), I expect the machine to clear it's memory completely.