Issue 824733 link

Starred by 2 users

Issue metadata

Status:	Duplicate
Merged:	issue 126398
Owner:	----
Closed:	Mar 2018
EstimatedDays:	----
NextAction:	----
OS:	Windows
Pri:	2
Type:	Bug-Security
allpublic Via-Wizard-Security

Password security issue

Reported by rcira...@gmail.com, Mar 22 2018

Issue description

UserAgent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36

Steps to reproduce the problem:
I track down a password thats hidden with asterisk

What is the expected behavior?
others can track down my password

What went wrong?
somenone used my computer and tracked down a password thats hidden with asterisk.

Did this work before? Yes i dont know

Chrome version: 64.0.3282.140  Channel: n/a
OS Version: Windows 7 6.1 build7601
Flash Version: flash player 28

Can i get a reward by reporting this bug to you ?
Or do i send this bug to others ?

Comment 1 by elawrence@chromium.org, Mar 22 2018

Mergedinto: 126398
Status: Duplicate (was: Unconfirmed)

Please see the following articles:

https://chromium.googlesource.com/chromium/src/+/master/docs/security/faq.md#Why-arent-physically_local-attacks-in-Chromes-threat-model

https://chromium.googlesource.com/chromium/src/+/master/docs/security/faq.md#What-about-unmasking-of-passwords-with-the-developer-tools

https://textslashplain.com/2017/10/16/stealing-your-own-password-is-not-a-vulnerability/

Project Member

Comment 2 by sheriffbot@chromium.org, Jun 28 2018

Labels: -Restrict-View-SecurityTeam allpublic

This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

►

Issue 824733 link

Issue metadata

Password security issue

Issue description

Comment 1 by elawrence@chromium.org, Mar 22 2018

Comment 1 Deleted

Comment 2 by sheriffbot@chromium.org, Jun 28 2018

Comment 2 Deleted

Sign in to add a comment