New issue
Advanced search Search tips

Issue 635312 link

Starred by 1 user

Issue metadata

Status: WontFix
Owner: ----
Closed: Aug 2016
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: ----
Type: Bug-Security



Sign in to add a comment

Security: chrome password protection is in invalid stuation

Reported by vectorma...@gmail.com, Aug 7 2016

Issue description

Hi, I detected very important bug maybe this is not programatic bug but there is big invalid mention about this issue. If You are using google chrome in a public computer for example work computer. See what happens ; I logged chrome for sync my account and extensions also for gmail auth. I logged in chrome with my google account. But remember, this is a shared computer which is the windows based computer and all users and passwords of this computer knows by the company owners or managers.

So problem with this when you goto chrome setting and saved passwords ( for example manager opens the saved passwords when emplooye is not there). chrome asks windows passwords for the show saved password? I really shocked here chrome allows to see the my private saved passwords which are the protected (have to protected i think) by my google account. But chrome doesn't ask google account password for the see saved passwords. It ask only windows user pass which is the almost evertime weak and known by the everyone. 

This is big risk about privacy of chrome users. Chrome allows the managers or ow ners the access emplooyes private passwords.

Best Regards,
Enver GÖKMEN
+90 506 951 67 50

 
Status: WontFix (was: Unconfirmed)
Hi there, thanks for the report. Unfortunately this is working as intended in Chrome. Please take a look at https://www.chromium.org/Home/chromium-security/security-faq#TOC-Why-aren-t-physically-local-attacks-in-Chrome-s-threat-model- for more details.
Project Member

Comment 2 by sheriffbot@chromium.org, Nov 14 2016

Labels: -Restrict-View-SecurityTeam allpublic
This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Sign in to add a comment