Ummm ... I disagree

Post #171,053 by drewk 8/26/04 12:18:25 PM Reply	Ummm ... I disagree In order for a browser to "remember" passwords, they have to be kept somewhere the browser can see. If I felt like it I could check the Mozilla source and see where it puts it and look that info up pretty easily. What this really shows is how insecure the "remember this password" function really is. That's why I never use it. And hey, they know that too: "The public should have access to this technology," says Alex Konanykhin, CEO of KMGI, "not only for the benefits it will afford them, but to better understand how unprotected their private information currently is. Exposure is the first step to solving the problem." Their tool isn't really the problem, and Windows users aren't the only ones vulnerable to this. The problem is the feature itself. === Implicitly condoning stupidity since 2001.
Post #171,071 by Steven A S 8/26/04 3:10:23 PM Reply	Re: Ummm ... I disagree Mozilla keeps it's password in "Documents and Settings\\username\\Application Data\\Mozilla\\Profiles\\default\\profileid\\########.s" the userid and password seem to be encrypted even if you have Encrypt Sensitive Data off. Note, username is a given, but profileid and ######## will be different on each computer. ~~~)-Steven---- "I want you to remember that no bastard ever won a war by dying for his country. He won it by making the other poor dumb bastard die for his country..." General George S. Patton
Post #171,087 by Arkadiy 8/26/04 4:26:11 PM Reply	Encrypted? As in DMCA? [link\|http://www.holgermetzger.de/moz-passwords.html\|http://www.holgermet...oz-passwords.html] -- "...was poorly, lugubrious and intoxicated." -- Patrick O'Brian, "Master and Commander"
Post #171,195 by Steven A S 8/27/04 8:51:27 AM Reply	OK, didn't say it was well encrypted ~~~)-Steven---- "I want you to remember that no bastard ever won a war by dying for his country. He won it by making the other poor dumb bastard die for his country..." General George S. Patton

Welcome to IWETHEY!