New issue
Advanced search Search tips

Issue 781217 link

Starred by 2 users
Status: Duplicate
Merged: issue 126398
Owner: ----
Closed: Nov 2017
Components:
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: ----
Type: Bug-Security



Sign in to add a comment

Security: Passwords can be unmasked

Reported by anastaz...@gmail.com, Nov 3 2017 
In Google Chrome there are bug to bypass google remember password without knowing owner google password or windows login password.

Chrome [Version 61.0.3163.100] [official build]

By knowing google remember password just go to those website where it was saved. Than in password option by editing source code and you can now see those password what was actually remembering by google password save option. it can be created big security problem.
I attach some simple screenshot to process how to know someone saved password without knowing owner google password or windows pass word or anything.
Screenshot (73).png
509 KB View Download
Screenshot (74).png
500 KB View Download
Screenshot (75).png
300 KB View Download
Screenshot (78).png
300 KB View Download
Screenshot (79).png
300 KB View Download
Screenshot (80).png
300 KB View Download

Comment 1 by elawrence@chromium.org, Nov 8 2017

Components: UI>Browser>Passwords
Mergedinto: 126398
Status: Duplicate (was: Unconfirmed)
Summary: Security: Passwords can be unmasked (was: Security: Password protection)
Please see https://chromium.googlesource.com/chromium/src/+/master/docs/security/faq.md#What-about-unmasking-of-passwords-with-the-developer-tools for discussion of why this and other physically local attacks are outside of the browser's threat model.
Project Member

Comment 2 by sheriffbot@chromium.org, Feb 14 2018

Labels: -Restrict-View-SecurityTeam allpublic
This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
►

Sign in to add a comment