New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 848061 link

Starred by 2 users

Issue metadata

Status: WontFix
Owner: ----
Closed: Jun 2018
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Chrome
Pri: 3
Type: Feature


Previous locations:
monorail:3856


Sign in to add a comment

please add one time password to view all saved password

Reported by rcd...@gmail.com, May 25 2018

Issue description

What do you want?
Input one time password to view all saved password

Why do you want it?
Because stealing password in chrome os was easy
Get your friend or anyone logged-in chromebooks, open saved password in settings, click unmask password and take a photo with smartphone, why do google not add very vital feature to protect this weakness
 
Project: chromium
Moved issue monorail:3856 to now be  issue chromium:848061 .
Labels: -Type-Enhancement Pri-2 Type-Feature
Status: Unconfirmed (was: New)
Components: UI>Browser>Passwords

Comment 4 by vabr@chromium.org, Jun 1 2018

Cc: nepper@chromium.org battre@chromium.org
Labels: -Pri-2 OS-Chrome Pri-3
Status: WontFix (was: Unconfirmed)
Thanks for the report.

Not sure why this should be a one time password? Do you just mean to extend the OS-account password reauthentication used on Win and Mac to Chrome OS?

If I understand correctly, this does not exist on Chrome OS, because Chrome OS provides very easy and safe ways to let others use the computer, without allowing information stealing in either way -- Guest mode (https://support.google.com/chromebook/answer/1057090) and full-profile login.

Also see:
https://dev.chromium.org/Home/chromium-security/security-faq#TOC-Why-aren-t-physically-local-attacks-in-Chrome-s-threat-model-

Based on the above, I'm closing this issue, but I'm cc-ing battre@ and nepper@ in case they have different views.

Comment 5 by rcd...@gmail.com, Jun 1 2018

let's say you forgot to click guest mode or leaving the logged-in chromebook while you away and someone bad who has targetting you to steal the password, they can steal ALL your password

Sign in to add a comment