News for hackers. Stuff that matters.
Re:Chrome breaks the Web by dhimes on Monday November 06, 2017 @11:28AM (#15636545)
They've also done something so threatening to users' security that I can't take them seriously on the issue. They've been doing it for years, they refuse to change, and it makes me conclude that they fundamentally don't understand the problem.

Every update of chrome erases their password manager entries. So for every site their password has to be re-entered.

Why is that dangerous? Because that means that my cousins and nephews other regular folks cannot trust Chrome to keep their passwords, so they must either reuse passwords or write them down somewhere. Obviously, a third-party password manager is simply not an option for these folks- they rely on the browser. The browser can get it right or get it wrong. Chrome gets it wrong.

Re:Chrome breaks the Web by emodendroket on Monday November 06, 2017 @11:40AM (#15636651)
> Every update of chrome erases their password manager entries.

That has not been my experience.

Re:Chrome breaks the Web by dhimes on Monday November 06, 2017 @11:51AM (#15636745)
I wonder what the difference is? It's been going on for years.

https://superuser.com/questions/926902/google-chrome-loses-d...

Re:Chrome breaks the Web by emodendroket on Monday November 06, 2017 @12:38PM (#15637107)
Have they enabled the Cloud password sync thing?
Re:Chrome breaks the Web by dhimes on Monday November 06, 2017 @12:57PM (#15637280)
They may have but I don't use it.
Re:Chrome breaks the Web by emodendroket on Monday November 06, 2017 @02:28PM (#15638233)
I use it and my passwords stick around, so perhaps enabling it would help?
Re:Chrome breaks the Web by dhimes on Monday November 06, 2017 @03:38PM (#15638808)
Maybe that's the key, and why they don't care. I tend to stay away from that kind of service though.
Re:Chrome breaks the Web by emodendroket on Monday November 06, 2017 @05:10PM (#15639449)
I was a little skeptical too but it seems to be encrypted locally before going anywhere, so it seems like it's alright to use. Anyway, if the deletion's compromising security as much as you say it might be an acceptable trade-off.
Re:Chrome breaks the Web by dhimes on Tuesday November 07, 2017 @07:51PM (#15649152)
Fortunately firefox also keeps them, so that's my workaround.
Re:Chrome breaks the Web by Santosh83 on Monday November 06, 2017 @11:43AM (#15636680)
Wait, Chrome updates erase your stored passwords!!?

At least for me they don't. I have 2 passwords stored in Chrome (not a site important enough to go into KeePass), and have been through multiple updates and yet to lose any passwords.

Re:Chrome breaks the Web by dhimes on Monday November 06, 2017 @11:49AM (#15636726)
Yeah- it gets rid of them. Linux chrome.

It's been doing it for a while apparently.

https://superuser.com/questions/926902/google-chrome-loses-d...

Re:Chrome breaks the Web by agnivade on Monday November 06, 2017 @12:18PM (#15636963)
Not for me. Linux Chrome user for quite some time. Never has my credentials been wiped out in an update.
Re:Chrome breaks the Web by dhimes on Monday November 06, 2017 @01:02PM (#15637325)
Not ever, eh? Interesting.
Re:Chrome breaks the Web by Santosh83 on Monday November 06, 2017 @12:02PM (#15636827)
Ah that explains it then. I'm currently on Windows, but used Linux for more than a decade previously and password storage in Chrome was consistently problematic. The coordination with gnome-keyring-daemon always seemed flaky... sadly doesn't look like Chrome are in a hurry to improve this area.