Issue metadata
Sign in to add a comment
|
Security: Google Chrome on Linux rsync allows login without password
Reported by
josephho...@gmail.com,
Dec 21 2016
|
||||||||||||||||||
Issue descriptionJust wanted to let you guys know that when using google chrome on a linux machine it's possible to rsync the user's entire home directory during a backup. That includes the .cache directory under the /home/user/ directory. If you us rsync to backup your /home/user directory (Example: rsync -av /home/user /your/backup/location) This grabs all the files in that directory including the .cache files as well. If you then go to a different computer and restore your backups using rsync -av /home/user /home/newcomputeruser then it includes the .cache files as well. Next if you download google chrome and then open it it'll open with all your user information already loaded. It doesn't even ask you for your passwords or any authentication.
,
Dec 21 2016
To add to what WFH, said: This shouldn't be surprising. If you can read any data that an account owns, then you should expect to be able to use any data an account owns. |
|||||||||||||||||||
►
Sign in to add a comment |
|||||||||||||||||||
Comment 1 by wfh@chromium.org
, Dec 21 2016Status: WontFix (was: Unconfirmed)