News for hackers. Stuff that matters.

A comment on Chrome's insane password security strategy. Parent comment

Re:Chrome's insane password security strategy by amdavies on Tuesday August 06, 2013 @11:59AM (#6167328)
justin: other applications offer an added layer of security through a master password, which chrome does not, are you saying that this has 0 affect of the level of security surrounding the stored passwords?

Or are you saying chrome(ium?) uses the same technique but hidden to the user?

[ Parent | on HN ]
Re:Chrome's insane password security strategy by cawoodfield on Tuesday August 06, 2013 @01:04PM (#6167727)
Not just other applications - MacOS's own Keychain application requires the user to re-enter their login password in order to see passwords that were saved in their user keychain. This is to ensure that while you might be able to make use of those passwords if you have physical access, you won't be able to easily copy them off somewhere else.

Please Justin, explain the real reason that Chrome does this, or admit that it's a bug and get it fixed. The reasons you mention are just stupid.

[ Parent | on HN ]