New issue
Advanced search Search tips

Issue 809371 link

Starred by 3 users

Issue metadata

Status: WontFix
Owner: ----
Closed: Feb 2018
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: ----
Type: Bug-Security



Sign in to add a comment

Security: google save password issue

Reported by bhabani...@gmail.com, Feb 6 2018

Issue description

Hello, there...!!
Here I found a serious issue in the chrome browser passwords settings menu. If anyone can get your pc or even for short time he or she can manage to see your saved password by simply clicking the "EYE" symbol. So it would be better If you could add another password-based encryption there. Please find the attached the screenshot.
Thank you

 
Capture.JPG
95.4 KB View Download
Labels: -Restrict-View-SecurityTeam
Status: WontFix (was: Unconfirmed)
Hi, thanks for the report. We do not consider this a security issue because it requires an attacker to already be in physical control of your computer, and Chrome cannot defend against that. The password manager's re-authentication prompt is to prevent casual snoopers. If you leave your machine unattended, we recommend using a screen lock. Please see https://chromium.googlesource.com/chromium/src/+/master/docs/security/faq.md#why-arent-physically_local-attacks-in-chromes-threat-model for more information.
See, by default our Chrome browser is login with Google account until and
unless you log out . If some of your friend suddenly comes to you and
asking for doing some little surfing in your browser , then they can easily
get all the password in a second. You should provide there
re-authentication password entry. Protectiing Password is a sensitive
issue.. don't neglect it. only attacker doesn't stole your personal stuff
your near and dear one can also.  If someone gets password easily from
Chrome , then why Google needs authentication while searching for password
from passwords.google.com

Sign in to add a comment