stichter
Joined: 08 Jan 2006
Posts: 1
|
 Posted: 01/08/06 - 05:00 Post subject: firefox password |
 |
|
I installed firefox some time ago, and only now have I found a very strange feature, and a potential security leak. Under Tools / Options / Privacy / Passwords, there's a handy little option called View Saved Passwords. By clicking it, and going through a single 'are you sure' dialogue, you can view all the passwords saved for any login page you visited. Now, this may not be something a user would want to be accessible to anyone given 15 seconds behind his keyboard. Granted, there's a master password available, but this option is off be default. Shouldn't the users be clearly informed of this risk, and automatically offered to set a master password?
|
|
mcgreal
Joined: 08 Jan 2006
Posts: 1
|
| Posted: 03/02/07 - 12:07 Post subject: |
|
|
Maybe you're right, and they should've done it that way, but I can understand doing things this way. First, anyone even remotely interested in his security options will notice this on his own. Second, if you let someone mess with your browser settings, you should be aware of the risks involved anyway. And third, imagine a pop-up dialogue that asks you to set some password that you're not really sure what it's fore just as you were about to read your webmail – odds are you'll just brush it off and set some insignificant phrase that you'll soon forget.
|
|
