New issue
Advanced search Search tips

Issue 627062 link

Starred by 1 user

Issue metadata

Status: WontFix
Owner: ----
Closed: Jul 2016
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: ----
Type: Bug-Security



Sign in to add a comment

Security: browsers vulnerability

Reported by henikifl...@gmail.com, Jul 11 2016

Issue description


when some one enter email and password it says would you like to save then if we say yes and start to use gmail our email and password will be saved after we log out and go when user user come and open (www.gmail.com ) in the email filed and password field their is some one's address like emaillhhhhhh@yahoo.com or gmail password ****** so the problem of this Vulnerability is any one who use that computer can see other's password if simply right click on the password field then click inspect element we will get this on the password field <input name="pass" tabindex="2" class="inputtext" id="pass" type="password"> so if some one change " type="password" in to " type="text d" it will change into words so that any one can see the password and hack it it is unsafe Google has it's own browser. It may fix the problem. But what. If   in other browser's like opera. Uc      when users are log in in gmail account  everytime  It will be unsafe. And open a path for a   vulnerability and hacking  hackers  So even if it requires a heavy social engineering to fix the problem  google has to promote it's browser in africa because peaople in africa has less knowledge in security and vulnerability what safe browser is safe unsafe they don't have more information so google has to start a project to advert and promote it's own browser more it is also good for business  and the other vulnerability I found  I attach to the picture and send you you can see it thank you hope you will replay me soon


 

Comment 1 by palmer@chromium.org, Jul 13 2016

Status: WontFix (was: Unconfirmed)
Please see the Chrome Security FAQ: https://www.chromium.org/Home/chromium-security/security-faq#TOC-Why-aren-t-physically-local-attacks-in-Chrome-s-threat-model- We do not consider it a bug that people sharing the same computer can see each other's browsing history or other information.

The best you can do is to either (a) not save passwords in Chrome; or (b) use distinct operating system accounts (that is, if there are 2 people in your household, create Person 1 and Person 2 accounts in Windows).
Project Member

Comment 2 by sheriffbot@chromium.org, Oct 19 2016

Labels: -Restrict-View-SecurityTeam allpublic
This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Sign in to add a comment