Google Chrome Security Issue that everyone knows about

Thought that was common knowledge. Same "security hole" is available in the other major browsers too. Just go to the preferences or options menu and look for saved passwords.
 
Ok, I see the issue, but people should be aware of this anyway. Exactly the same is possible in Firefox (and presumably others) without issue.

The only reason I can see a big hooha being made of it is because it's Google.
 
It's not a security hole at all, I thought this was common knowledge! My colleague was away 3 weeks ago and I went into her saved passwords at work to find a password for creditsafe. It came in handy to have that function available.
 
"Security Hole" is a mis-nome, I agree. I didn't write the article :rolleyes:

As a piece of information, either use it, or ignore it.

Edited thread title (y)
 
If they do create a master password to enter prior to seeing the saved passwords, is it possible to save the master password? :whistle:
 
OMG.
This is just stupid.

A [Show] button ?
This is a massive security hole.

massive.security.hole.in.chrome.firefox.webp


DRE said:
Thought that was common knowledge. Same "security hole" is available in the other major browsers too. Just go to the preferences or options menu and look for saved passwords.
Click to expand...
+Confirmed for Firefox.

Absolutely crazy.
Wonder if you can [show] for Paypal.com !!
 
Its built into most modern web browsers, the mac OS X operating system... This is standard practice in a lot of places; its really not a security hole.
 
King Kovifor said:
Its built into most modern web browsers, the mac OS X operating system... This is standard practice in a lot of places; its really not a security hole.
Click to expand...
It definitely is a massive, easily accessible security hole.

Anyone know which browsers do a better job of Password Management than Chrome and Firefox ?
 
That too (at Matt). lol. But in definition of what a security hole is, this doesn't fit the criteria.

A security hole is usually accepted to be something that allows an attacker access to your information (without physically being on your machine), this isn't one. Set a password for your computer, never leave it unattended or better yet, don't use these features.
 
King Kovifor said:
But in definition of what a security hole is, this doesn't fit the criteria.

A security hole is usually accepted to be something that allows an attacker access to your information (without physically being on your machine), this isn't one. Set a password for your computer, never leave it unattended or better yet, don't use these features.
Click to expand...
That isn't the definition of a security hole.
And this a [show] button is massive hole in securing passwords.

chrome://settings/passwords

Unbelievable.
Firefox23.master.password.webp


At least Firefox 23 has a Master Password option.
I'm back to Firefox until this gets fixed.
 
Digital Doctor said:
That isn't the definition of a security hole.
And this a [show] button is massive hole in securing passwords.

chrome://settings/passwords

Unbelievable.
View attachment 53466

At least Firefox 23 has a Master Password option.
I'm back to Firefox until this gets fixed.
Click to expand...

The thing is if you are the only person that uses your computer and you aren't visiting sites you shouldn't then you are safe as no one will be able to get a hold of your passwords.
 
Ernest L. Defoe said:
The thing is if you are the only person that uses your computer
Click to expand...
That's unrealistic in many computer scenarios.
Good article
http://www.theguardian.com/technology/2013/aug/07/google-chrome-password-security-flaw


Windows registry edit to fix the Chrome passwords visible in clear text.
http://www.chromium.org/administrators/policy-list-3#PasswordManagerAllowShowPasswords


You should download the Secure Profile extension to add a master password for chrome.
Link to download: https://chrome.google.com/webstore/detail/secure-profile/eddeeogaiodnhfkingpegpmhpdiifbgh
 
Last edited:
Digital Doctor said:
That isn't the definition of a security hole.
And this a [show] button is massive hole in securing passwords.

chrome://settings/passwords

Unbelievable.
View attachment 53466

At least Firefox 23 has a Master Password option.
I'm back to Firefox until this gets fixed.
Click to expand...
A few definitions of a security hole:
In computer security, a vulnerability is a weakness which allows an attacker to reduce a system's information assurance.
Vulnerability is the intersection of three elements: a system susceptibility or flaw, attacker access to the flaw, and attacker capability to exploit the flaw.[1] To exploit a vulnerability, an attacker must have at least one applicable tool or technique that can connect to a system weakness. In this frame, vulnerability is also known as the attack surface.
Click to expand...
http://en.wikipedia.org/wiki/Security_hole

Shortcoming of a computer program that allows unauthorized users (hackers) to gain access to a system or network, and to interfere with its operations and data.
Click to expand...
http://www.businessdictionary.com/definition/security-hole.html
http://itlaw.wikia.com/wiki/Security_hole

This isn't a security hole. Lock your computer, don't use the features, and on public computers, manage your saved passwords to make sure you don't save any.
 
Top Bottom