*** This bug is a security vulnerability ***

Public security bug reported:

Binary package hint: chromium-browser

See:

http://penguindroppings.wordpress.com/2010/05/18/chromium-saved-passwords/
http://code.google.com/p/chromium/issues/detail?id=1397

Apparently there are hooks to do the encryption, but they haven't been
implemented on Linux.

I consider this a security issue, as users have come to expect passwords
will be encrypted through other browsers such as Firefox. If a computer
is stolen, the thief can get unlimited access to all passwords just by
booting up onto a live CD.

I have confirmed this with chromium-browser 5.0.342.9~r43360-0ubuntu2 in
lucid.

Brian May

** Affects: chromium-browser (Ubuntu)
     Importance: Undecided
         Status: New

** Visibility changed to: Public

-- 
chromium doesn't encrypt passwords
https://bugs.launchpad.net/bugs/585234
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to