Comment #31 on issue 1397 by jspeavey: Master password is missing http://code.google.com/p/chromium/issues/detail?id=1397
Abarth, from my understanding - the firefox utility you reference *does not* circumvent the Firefox master password, it is simply a brute-force guesser no different than any other dictionary/hash guessing tool like JTR or LC but targeted for Firefox's encrypted store. There is no reference to any particular weakness in the symmetric encryption technique used by firefox nor any shortcut to retrieve/regenerate the master password. But to answer your straw-man anyway, no, I would no consider this issue addressed if there was a master password in the browser UI but someone could circumvent the master password by using sqlite on the command line to look at the password store directly. This is an issue and a security risk. Someone walking away from their computer without locking it should not consequently put at risk every single account/password they have saved in chrome; this turns a small security risk into an extremely large one. -- You received this message because you are listed in the owner or CC fields of this issue, or because you starred this issue. You may adjust your issue notification preferences at: http://code.google.com/hosting/settings --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Chromium-bugs" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/chromium-bugs?hl=en -~----------~----~----~----~------~----~------~--~---
