New issue
Advanced search Search tips

Issue 625200 link

Starred by 1 user

Issue metadata

Status: WontFix
Owner: ----
Closed: Jul 2016
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: ----
Type: Bug-Security



Sign in to add a comment

Security: Chrome Password

Reported by chengxua...@gmail.com, Jul 1 2016

Issue description

When using the Windows system version of Chrome, I found that Chrome use Windows password to verify the way to decide whether to display a user's computer stored in Chrome in many website passwords, if the Windows system password is empty, in Chrome settings where you can directly shows Chrome saved passwords without any verification, I think this program thinking there is a big security risk, if a user loses a power-on password is not set Windows computer systems, along with this loss may be preserved numerous Chrome website account and password is lost. in addition, we know that Windows security has been lackluster, and there are many ways to get rid of Windows provided with a power-on password system password, because I have not tested, so I do not know through a third party way cleared after the Windows system power-on password, go to view Chrome saved passwords whether authorization is required, and if not, it means that the impact of these issues I will further expand, I hope Google will boot Windows authentication password to verify Google account password, which will help improve security.
...
 
Labels: -Restrict-View-SecurityTeam
Status: WontFix (was: Unconfirmed)
This is an example of a physically local attack, which is not in Chrome's threat model. See https://www.chromium.org/Home/chromium-security/security-faq#TOC-Why-aren-t-physically-local-attacks-in-Chrome-s-threat-model- for more information.
If I get chrome saved passwords by hacking and control a Windows computer?
Project Member

Comment 3 by sheriffbot@chromium.org, Oct 8 2016

Labels: allpublic
This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Sign in to add a comment