Chrome's insane password security strategy

Re:Chrome's insane password security strategy by mullingitover on Tuesday August 06, 2013 @06:01PM (#6169511)

>If you don't want people browsing your passwords, you can't ever give them access to your user account or your unlocked desktop. That's it, that is the entire solution.

Nope.

Just don't use Chrome. That's an even better solution.

[ Parent | on HN ]

Re:Chrome's insane password security strategy by thisusername on Tuesday August 06, 2013 @11:00PM (#6170556)

Hahahahahhhh.

Let me teach you a neat trick (I'll use firefox as an example, but this can be done in any browser because it's a "feature" of HTML).

>Open firefox and navigate to a login page where your password is saved

>Right click on password box and click inspect element

>In the console, change type="password" to type=""

>Move your eyes back to the password field

Oh dear, what's this?!

Protip: Don't store your passwords in your browsers if you let other people use your computer. End of story.

[ Parent | on HN ]

Re:Chrome's insane password security strategy by papacity on Wednesday August 07, 2013 @09:59AM (#6172828)

Ha... The people complaining really are novices, looking for something to get outraged over. Every operating system allows multiple user accounts. I recommend people start learning how to use them.

[ Parent | on HN ]

Re:Chrome's insane password security strategy by mullingitover on Wednesday August 07, 2013 @01:40PM (#6174303)

I'm not a novice, but I would prefer that it wasn't trivial for a novice to access my passwords if I'm away from the keyboard for 30 seconds. A novice is going to have not a single clue of what to do with a console, but they can get at passwords in plaintext with four clicks with Chrome. No other browser makes it this easy to get at passwords in plaintext.

[ Parent | on HN ]

Re:Chrome's insane password security strategy by papacity on Wednesday August 07, 2013 @05:59PM (#6175945)

> No other browser makes it this easy to get at passwords in plaintext.

In Firefox you can go to preferences, security, and saved passwords. And News Flash: If you leave your wallet unattended for 30 seconds, someone could take your money. I guess wallet makers should include a warning too?

[ Parent | on HN ]

Re:Chrome's insane password security strategy by mullingitover on Wednesday August 07, 2013 @08:54PM (#6176718)

> In Firefox you can go to preferences, security, and saved passwords.

Incorrect if you set a master password, which Firefox allows you to do and is the reason why everyone's saying 'wtf, chrome?' and leaving firefox alone.

[ Parent | on HN ]

Re:Chrome's insane password security strategy by papacity on Thursday August 08, 2013 @10:47AM (#6179231)

IF you set a master password... But how many people do that? By the way, you can set up user profiles in Chrome.

[ Parent | on HN ]

Re:Chrome's insane password security strategy by mullingitover on Thursday August 08, 2013 @07:47PM (#6182760)

That's not the point. The point is that Chrome lacks this option, which, again, is why nobody's heckling Firefox right now. This isn't a thread about people failing to configure their software, it's a thread about a popular piece of software that's bungling some trivial security features.

[ Parent | on HN ]

Re:Chrome's insane password security strategy by teeja on Thursday August 08, 2013 @03:35PM (#6181276)

How many? ALL the smart people.

As for the dumb ones, they're storing their passwords on a sticky-post. Or using Chrome.

[ Parent | on HN ]

Re:Chrome's insane password security strategy by marshray on Friday August 09, 2013 @03:39AM (#6184221)

Thanks. By chance, I needed to recover a password (one of my own of course) today and I remembered that trick.

[ Parent | on HN ]