New issue
Advanced search Search tips

Issue 758862 link

Starred by 1 user
Status: Duplicate
Merged: issue 126398
Owner: ----
Closed: Aug 2017
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: ----
Type: Bug-Security



Sign in to add a comment

Security: Saved password can easily retrieve.

Reported by karuntho...@am.students.amrita.edu, Aug 25 2017 
Any one can retrieve the password that stored in google chrome browser. To show password it asks system password. I include one video that shows how to retrieve the password from the browser. 

Solution: Please provide authentication before when clicking saved password option.
Avoid auto filling mechanism in username and password field, that give semi-security for user login and hide password editing in inspect code or website.
Google Chrome 25 Aug 2017 12_52_22 PM.mp4
7.0 MB View Download

Comment 1 by elawrence@chromium.org, Aug 25 2017

Mergedinto: 126398
Status: Duplicate (was: Unconfirmed)
Thanks for the note. This is indeed the most commonly reported misunderstanding of the browser security model.

You can learn more about why local attacks are outside of Chrome's threat model here: https://chromium.googlesource.com/chromium/src/+/master/docs/security/faq.md#What-about-unmasking-of-passwords-with-the-developer-tools
Project Member

Comment 2 by sheriffbot@chromium.org, Dec 2 2017

Labels: -Restrict-View-SecurityTeam allpublic
This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
►

Sign in to add a comment