• This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn more.

Google Chrome Security Issue that everyone knows about

DRE

Well-known member
#2
Thought that was common knowledge. Same "security hole" is available in the other major browsers too. Just go to the preferences or options menu and look for saved passwords.
 

ijeffers

Active member
#4
Ok, I see the issue, but people should be aware of this anyway. Exactly the same is possible in Firefox (and presumably others) without issue.

The only reason I can see a big hooha being made of it is because it's Google.
 

James

Well-known member
#6
It's not a security hole at all, I thought this was common knowledge! My colleague was away 3 weeks ago and I went into her saved passwords at work to find a password for creditsafe. It came in handy to have that function available.
 

lazer

Well-known member
#7
"Security Hole" is a mis-nome, I agree. I didn't write the article :rolleyes:

As a piece of information, either use it, or ignore it.

Edited thread title (y)
 

James

Well-known member
#9
If they do create a master password to enter prior to seeing the saved passwords, is it possible to save the master password? :whistle:
 

Digital Doctor

Well-known member
#10
OMG.
This is just stupid.

A [Show] button ?
This is a massive security hole.

massive.security.hole.in.chrome.firefox.jpg


Thought that was common knowledge. Same "security hole" is available in the other major browsers too. Just go to the preferences or options menu and look for saved passwords.
+Confirmed for Firefox.

Absolutely crazy.
Wonder if you can [show] for Paypal.com !!
 

Jeremy

Well-known member
#13
Its built into most modern web browsers, the mac OS X operating system... This is standard practice in a lot of places; its really not a security hole.
 

Digital Doctor

Well-known member
#15
Its built into most modern web browsers, the mac OS X operating system... This is standard practice in a lot of places; its really not a security hole.
It definitely is a massive, easily accessible security hole.

Anyone know which browsers do a better job of Password Management than Chrome and Firefox ?
 

Jeremy

Well-known member
#16
That too (at Matt). lol. But in definition of what a security hole is, this doesn't fit the criteria.

A security hole is usually accepted to be something that allows an attacker access to your information (without physically being on your machine), this isn't one. Set a password for your computer, never leave it unattended or better yet, don't use these features.
 

Digital Doctor

Well-known member
#17
But in definition of what a security hole is, this doesn't fit the criteria.

A security hole is usually accepted to be something that allows an attacker access to your information (without physically being on your machine), this isn't one. Set a password for your computer, never leave it unattended or better yet, don't use these features.
That isn't the definition of a security hole.
And this a [show] button is massive hole in securing passwords.

chrome://settings/passwords

Unbelievable.
Firefox23.master.password.jpg


At least Firefox 23 has a Master Password option.
I'm back to Firefox until this gets fixed.
 

Ernest L. Defoe

Well-known member
#18
That isn't the definition of a security hole.
And this a [show] button is massive hole in securing passwords.

chrome://settings/passwords

Unbelievable.
View attachment 53466

At least Firefox 23 has a Master Password option.
I'm back to Firefox until this gets fixed.
The thing is if you are the only person that uses your computer and you aren't visiting sites you shouldn't then you are safe as no one will be able to get a hold of your passwords.
 

Digital Doctor

Well-known member
#19
The thing is if you are the only person that uses your computer
That's unrealistic in many computer scenarios.
Good article
http://www.theguardian.com/technology/2013/aug/07/google-chrome-password-security-flaw


Windows registry edit to fix the Chrome passwords visible in clear text.
http://www.chromium.org/administrators/policy-list-3#PasswordManagerAllowShowPasswords


You should download the Secure Profile extension to add a master password for chrome.
Link to download: https://chrome.google.com/webstore/detail/secure-profile/eddeeogaiodnhfkingpegpmhpdiifbgh
 
Last edited:

Jeremy

Well-known member
#20
That isn't the definition of a security hole.
And this a [show] button is massive hole in securing passwords.

chrome://settings/passwords

Unbelievable.
View attachment 53466

At least Firefox 23 has a Master Password option.
I'm back to Firefox until this gets fixed.
A few definitions of a security hole:
In computer security, a vulnerability is a weakness which allows an attacker to reduce a system's information assurance.
Vulnerability is the intersection of three elements: a system susceptibility or flaw, attacker access to the flaw, and attacker capability to exploit the flaw.[1] To exploit a vulnerability, an attacker must have at least one applicable tool or technique that can connect to a system weakness. In this frame, vulnerability is also known as the attack surface.
http://en.wikipedia.org/wiki/Security_hole

Shortcoming of a computer program that allows unauthorized users (hackers) to gain access to a system or network, and to interfere with its operations and data.
http://www.businessdictionary.com/definition/security-hole.html
http://itlaw.wikia.com/wiki/Security_hole

This isn't a security hole. Lock your computer, don't use the features, and on public computers, manage your saved passwords to make sure you don't save any.