New issue
Advanced search Search tips

Issue 636249 link

Starred by 1 user

Issue metadata

Status: WontFix
Owner: ----
Closed: Aug 2016
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: ----
Type: Bug-Security



Sign in to add a comment

Security: password leak

Reported by eddiejdi...@gmail.com, Aug 10 2016

Issue description

Installed windows 10, installed chrome, installed zwift, getting my system set up,
did a login of a few websites (not zwift) and saved the passwords on chrome and only chrome.
the only other password was the system password which is different from my browser passwords.
opened Zwift to login and make sure my system was ready to go added my email address and Zwift was able to pull the password from the browser, I reported this to zwift and they informed me that there software only takes passwords from explorer, I did on no occasion open explorer nor save any other passwords other than those saved in chrome and the system password, the system password being different from the password pulled from the system.
to see if I had somehow made a mistake, I reinstalled windows again and then I installed windows 8 and the same happened.
personally i use a graded password, depending on the security of the service I am using, system, financial or not so important web services like Zwift.
 

Comment 1 by och...@chromium.org, Aug 10 2016

Status: WontFix (was: Unconfirmed)
I'm not sure what happened in your case, but in general Chrome cannot prevent other applications running as your user from compromising Chrome (e.g. stealing passwords).

Please see https://www.chromium.org/Home/chromium-security/security-faq#TOC-Why-aren-t-physically-local-attacks-in-Chrome-s-threat-model-
Project Member

Comment 2 by sheriffbot@chromium.org, Nov 17 2016

Labels: -Restrict-View-SecurityTeam allpublic
This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Sign in to add a comment