![]() We've debated it over and over again, but the conclusion we always come to is that we don't want to provide users with a false sense of security, and encourage risky behavior. ![]() Schuh wrote on Hacker News that "We've also been repeatedly asked why we don't just support a master password or something similar, even if we don't believe it works. Apple's Safari requires the user to enter a master password before it will show stored passwords. Some versions of Microsoft's Internet Explorer have also had the same failings. ![]() In 2010, Firefox was revealed to use the same "plain text" storage that Chrome is being criticised for - and added a master password option Other browsers have previously had similar flaws with password visibility - and closed them. ![]() Every day, millions of normal, every-day users are saving their passwords in Chrome. They don't expect it to be this easy to see their passwords. It has millions of users and is seen by some as crucial to Google's future efforts to monetise web use, by tying users to Google accounts and synchronising between their desktop and mobile systems.Įlliott Kember, a UK-based software developer from New Zealand who discovered the flaw, commented: "In a world where Google promotes its browser on YouTube, in cinema pre-rolls, and on billboards, the clear audience is not developers. He characterised the flaw as "how to get all your big sister's passwords".Ĭhrome is one of the three most widely-used browsers on desktops worldwide, along with Microsoft's Internet Explorer and Mozilla's Firefox. That response was described by Sir Tim Berners-Lee, the British inventor of the web, as "disappointing". A list of obscured passwords is then revealed for sites - but clicking beside them reveals the plain text of the password, which could be copied, or sent via a screenshot to an outside site.īut the head of Google's Chrome developer team, Justin Schuh, said he was aware of the weakness and that there were no plans to change the system. Seeing the passwords is achieved simply by clicking on the Settings icon, choosing "Show advanced settings…" and then "Manage saved passwords" in the "Passwords and forms" section.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |