Firefox user blames program for breaking up her engagement

biggiesmallz

Banned
Feb 1, 2003
881
0
0
This privacy flaw has caused my fiancé and I to break-up after having dated for
5 years.

Basically, we share one computer but under separate Windows XP user accounts.
We both use Mozilla Firefox -- well, he used to use it more than I do but now
we don't really use it. The privacy flaw is this: when he went to log-in under
his dating sites (jdate.com, swinglifestyle.com, adultfriendfinder.com, etc.),
Mozilla promptly asks whether or not he'd like Firefox to save the passwords
for him. He chose never, obviously. However, when he logged off his user
account, and I logged onto my Windows XP account X amount of days later, I
decided to use Firefox because hey -- it loaded everything much more
efficiently, was better to work on with website designs and is a lot more
stable than IE7beta2.

Firefox prompted whether or not I'd like it to save my password for logging
into my website. I chose never and changed my mind. I went into the Password
Manager to change the saved password option from Never to Always and that's
when I saw all these other sites that had been selected as "Never Save
Password." Of course, those were sites I had never visited or could ever dream
of visiting.

Then I realized who, how and what... and sh*t hit the fan. Your browser does
not efficiently respect the privacy of different users for one system.

Reproducible: Always

Steps to Reproduce:
1. Create 2 unique user accounts (for steps sake, let's call the two accounts
Joe and Mary) in Windows XP Home.
2. Logout and sign-in under Joe.
3. Open Firefox and go to an e-mail site or to jdate.com or wherever.
4. Attempt to log-in to the site so that Firefox will ask whether or not you
want your password saved.
5. Choose not to save the password.
6. After successfully logging in and having selected the "never save password"
option, logout.
7. Log-in as Mary and open Firefox.
8. Browse, browse, browse... but you don't really have to. Just go to "View
Saved Passwords," click on the tab that will show you sites to never save
passwords for, and you'll see whatever painful site Joe denied to save a
password for.
9. Break-up with fiancé.



Firefox should be respecting every single area of privacy per user on one
system. It's not doing that... I'm going to submit this as Major because not
everyone shares one computer, but it should really be considered Critical.


The post is about 1/3 of the way down

https://bugzilla.mozilla.org/show_bug.cgi?id=330884
 

Goosemaster

Lifer
Apr 10, 2001
48,775
3
81
no woman knows what ie7 beta 2 is. gotta be fake:p









































:laugh:

;)

Seriosuly though, that guy was a fvkign moron:laugh:
 

Shawn

Lifer
Apr 20, 2003
32,236
53
91
lol. sucks, but i wouldn't really call that a flaw. it's nice to know what sites you set to never. that way you can remove one from the list if you click it accidently.
 

notfred

Lifer
Feb 12, 2001
38,241
4
0
Originally posted by: Shawn
lol. sucks, but i wouldn't really call that a flaw. it's nice to know what sites you set to never. that way you can remove one from the list if you click it accidently.

They should be set on a per-user basis, not globally for all users.
 

mchammer

Diamond Member
Dec 7, 2000
3,152
0
76
Sounds like both of their accounts are admin level, so she could check on him easy anyway.
 

jagec

Lifer
Apr 30, 2004
24,442
6
81
It does seem stupid, but really, you should un-check "remember passwords" anyway.
 

Ilmater

Diamond Member
Jun 13, 2002
7,516
1
0
Originally posted by: Goosemaster
Seriously though, that guy was a fvkign moron:laugh:
No, that girl is a fvcking b1tch. Grow up, wh0re. The internet is for porn.
 

ribbon13

Diamond Member
Feb 1, 2005
9,343
0
0
Originally posted by: Kelvrick
Originally posted by: Ilmater
Originally posted by: Goosemaster
Seriously though, that guy was a fvkign moron:laugh:
No, that girl is a fvcking b1tch. Grow up, wh0re. The internet is for porn.

He wasn't browsing for porn.

OMG, he had an okcupid/match/alt account. Get over it. I have 'adultfriendfinder' on my list. I doubt my girl would get upset, since she's the reason it's there.
 

phisrow

Golden Member
Sep 6, 2004
1,399
0
0
It does seem problematic that any user setting would be visible in another account. Doesn't feel right. Probably a relic out of the same pit that spawned those damned "profile" dialogues.
 

spherrod

Diamond Member
Mar 21, 2003
3,897
0
0
www.steveherrod.com
Originally posted by: maziwanka
Originally posted by: Kelvrick
Originally posted by: Ilmater
Originally posted by: Goosemaster
Seriously though, that guy was a fvkign moron:laugh:
No, that girl is a fvcking b1tch. Grow up, wh0re. The internet is for porn.

He wasn't browsing for porn.

what was he doing?

logging on to dating/swinging websites - read the original post
 

EagleKeeper

Discussion Club Moderator<br>Elite Member
Staff member
Oct 30, 2000
42,589
5
0
More than likely he has used her account previously when she had not logged out.
 

Amused

Elite Member
Apr 14, 2001
57,387
19,698
146
Originally posted by: EagleKeeper
More than likely he has used her account previously when she had not logged out.

And yet, she posted a way to reproduce the issue on demand.
 

EagleKeeper

Discussion Club Moderator<br>Elite Member
Staff member
Oct 30, 2000
42,589
5
0
Originally posted by: Amused
Originally posted by: EagleKeeper
More than likely he has used her account previously when she had not logged out.

And yet, she posted a way to reproduce the issue on demand.
Not denying her story.
Just providing an alertnate explanation.

Either way, if that is what bothers her, then it is good that she found out in advance.