Corrupted passwords saved
Reported by
sachoub...@gmail.com,
Jun 13 2016
|
|||||||
Issue descriptionUserAgent: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36 Steps to reproduce the problem: I save my password after logging into a website (any website) and wait for some time (several days). What is the expected behavior? My passwords are supposed to be saved and synced on all my devices. What went wrong? After my login and password are saved for a website, I can login into the website normally for several days on any of my devices (laptop, smartphone, computer...). But after a few days, the password is replaced with a random string that is hundreds of caracters long, which is not my password. For instance, I have saved a password that is about 10 caracters long for a website, and when I look at the password that is saved on password.google.com, the password that is shown is: "sO8fo03EP/Adhf8d1XAImQChUtRZ8WaeygoI9DdY3S9ZnbKZggXmxgHIVNSPJhyb8BUKGKYFUYvbaSX+bs4z/PUKCVXBsgsTGkFKcRiNTpCkI8m8mEg70MUokSc0o/i8Jdy77ZN6poHXmxLdrWJRAHbSy8RG5CehFYGbQvAgRa7f6XcwL/rjIaLR99aiwAZeNu7+YrG/pkMpRxXDctl6w3S/U1wKGEz9vqwV0DyK6DSyyEqrBeoO+/eypTDIH8fkNxr4ya19KCXZByRbM8f2WsSLWescooiNFHXR/CeLwV7SZqIuX2SMAVIF8/N/XQLf3ud1TjUfbFAu+F+BumxO6Q==" Things started to go bad after all of my password disappeared a few weeks ago without any sensible reason. Did this work before? Yes April 2016 Chrome version: 51.0.2704.84 Channel: stable OS Version: 10.0 Flash Version: Shockwave Flash 21.0 r0 It doesn't depend on the device on which I save the password.
,
Jun 13 2016
I have just tested and the saved passwords are syncing correctly to all the devices. Also the saved passwords are displayed properly in passwords.google.com. I have also checked my personal account which has lots of saved passwords but did not find any issues. @sachouba60, are you seeing this on both passwords.google.com and chrome://settings/passwords? also could you please attach a screenshot of the corrupted passwords?
,
Jun 15 2016
Could we get a screenshot of chrome://sync-internals? Additionally, do we have your permission to inspect your server data? (We cannot see plaintext passwords, only encrypted blobs.)
,
Jun 15 2016
,
Jun 15 2016
@jnaveen : Yes, I see the issue on both passwords.google.com and chrome://settings/passwords. Here is a screenshot of both, with one of the corrupted passwords (all the very long passwords you can see on the right are corrupted). I have hidden my usernames. @maxbogue : Here is a screenshot of chrome://sync-internals. You have my permission to inspect my server data.
,
Jun 16 2016
Thank you for providing more feedback. Adding "Needs-Review" label for tracking. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
,
Jun 16 2016
In order to debug this issue, it will be really helpful if we can look into logs and data from server side to determine exactly how the data corruption might have happen. Could we get a permission to look at the data please?
,
Jun 29 2016
@sachouba60, could you please respond to comment 7?
,
Jul 8 2016
@sachouba60 already gave permission to look into the server data in comment #5
,
Jul 11 2016
I identified a few passwords with overly large encrypted blob, they all were created on Andriod phone running dev version of M46 chrome (Chrome ANDROID-PHONE 46.0.2490.92 (64cec2c590637d598803e37215e4cc731f8411ca)-devel,gzip(gfe)) Some were created and never modified after that, some were modified but length of values before and after matched, so I don't think password was replaced with long value. Could you try to update to latest stable version to see if it helps? I found two large groups of deleted passwords, one on April 9 with ~40 passwords, another on May 30 with ~20 passwords, but I couldn't see which device deleted them since logs have expired. sachouba60@: Please post on this bug if in the future you notice that large number of passwords get deleted?
,
Aug 3 2016
I cannot figure out the cause of this issue with current set of information. Closing it as NotRepro for now. Feel free to reopen if issue repeats. |
|||||||
►
Sign in to add a comment |
|||||||
Comment 1 by plaree@chromium.org
, Jun 13 2016