SECURITY HOLE: Firefox 2.0 exposes your PASSWORDS to everyone in plain text

[janeyard]

http://www.faqqly.com/helps/view/1/661

 

[NYHoustonman]

Wow, that's pretty crazy, thanks for the heads up.

 

[tailes151]

Well poop.

 

[MrChad]

Originally posted by: janeyard
http://www.faqqly.com/helps/view/1/661

That's the dumbest "security alert" I've ever read. If you're stupid enough to setup Firefox to remember your passwords on a PUBLIC computer, you deserve to have them stolen.

 

[Bateluer]

Originally posted by: MrChad

Originally posted by: janeyard
http://www.faqqly.com/helps/view/1/661

That's the dumbest "security alert" I've ever read. If you're stupid enough to setup Firefox to remember your passwords on a PUBLIC computer, you deserve to have them stolen.

Seconded. :roll:

 

[kamper]

The linked post may be a bit alarmist, but it's not a bad thing to know about. I'm still on 1.5 but after reading it I noticed that have some relatively important passwords in the open. It's a personal computer which is always password protected and my ~/ is encrypted (when the machine's off anyway, which isn't often) but I'd still rather have the master password on it and do now. My fault for not thinking it through in the first place, but it would have been nice for firefox to suggest that I create a master password when I agree to save a password.

 

[clickynext]

Originally posted by: MrChad

Originally posted by: janeyard
http://www.faqqly.com/helps/view/1/661

That's the dumbest "security alert" I've ever read. If you're stupid enough to setup Firefox to remember your passwords on a PUBLIC computer, you deserve to have them stolen.

I disagree. I never store my passwords on any computer, but for a regular user who doesn't know anything, they are usually led to believe that their information is somehow secured.

 

[MrChad]

Originally posted by: clickynext

Originally posted by: MrChad

Originally posted by: janeyard
http://www.faqqly.com/helps/view/1/661

That's the dumbest "security alert" I've ever read. If you're stupid enough to setup Firefox to remember your passwords on a PUBLIC computer, you deserve to have them stolen.

I disagree. I never store my passwords on any computer, but for a regular user who doesn't know anything, they are usually led to believe that their information is somehow secured.

If someone has physical access to your machine, nearly all security measures can be thrown out the window.

 

[MSCoder610]

Seems like a dumb reason to not "upgrade" to 2.0 - to me, that means moving up from Firefox 1.5 or something like that. Firefox 1.5 works the same way (Options>Privacy>Passwords>View Passwords>Show Passwords) - I don't use that feature in Firefox at all anymore.

Also, if I remember correctly, there's a simple program you can download that reveals all of the saved passwords from Internet Explorer, in plain text also, so it isn't just a Firefox issue.

 

[screw3d]

It has been there a long time ago.. and works the same way for other browsers. Not saying that it is a good thing though. In other words, newbie + pebkac + blog = big whoopie doo

 

[gorcorps]

Who would save passwords on a public computer anyways?

 

[Cerpin Taxt]

Originally posted by: screw3d
It has been there a long time ago.. and works the same way for other browsers. Not saying that it is a good thing though. In other words, newbie + pebkac + blog = big whoopie doo

lmao

 

[Stuxnet]

Originally posted by: gorcorps
Who would save passwords on a public computer anyways?

Kinda what I was thinking. Not a bug/problem IMO.

 

[corkyg]

I carry my passwords on a thumb drive encrypted by Roboform (Pass2Go). Why would anyone put them on a public machine? IMHO, much ado about nothing.

 

[KoolDrew]

Originally posted by: jbourne77

Originally posted by: gorcorps
Who would save passwords on a public computer anyways?

Kinda what I was thinking. Not a bug/problem IMO.

 

[MercenaryForHire]

Originally posted by: jbourne77

Originally posted by: gorcorps
Who would save passwords on a public computer anyways?

Kinda what I was thinking. Not a bug/problem IMO.... it's a feature!

- M4H

 

[CTho9305]

It's trivial to get your Internet Explorer saved passwords too. There is **NO WAY** to store passwords securely on the local machine if you don't require a master password to access them. Firefox lets you create such a "master password", which it then uses to encrypt the other ones.

Feel free to digg it - it's the kind of sensational misleading story lots of ID10Ts love.

 

[n0cmonkey]

It's relatively easy to get passwords from Windows and Mac OS X too...