On Wed, Aug 7, 2013 at 7:04 PM, Brian Conley <[email protected]> wrote: > Are they being irresponsible or aren't they? > > http://mashable.com/2013/08/07/chrome-password-security/?utm_cid=mash-com-fb-main-link > > That is a serous question in interested to hear a variety of opinions
this is how desktop environments manage passwords. you could copy paste some python into a terminal to do the same thing for any logged in user, not just browser passwords. (wifi, disk crypto, services, etc.) you manage this key ring with a password. if it is unlocked, assume your passwords are available in the clear! set your desktop to auto-lock on idle. require a password to unlock. if you need stronger separation of identities, authorizations, or risk, try a more constrained and isolated environment like Qubes [0]. if you want better control over the access and availability to credentials provided by a key ring / key manager, then install one that meets your needs and can be configured to the policy you desire. 0. "Qubes implements Security by Isolation" http://qubes-os.org/trac/wiki/QubesArchitecture -- Liberationtech list is public and archives are searchable on Google. Too many emails? Unsubscribe, change to digest, or change password by emailing moderator at [email protected] or changing your settings at https://mailman.stanford.edu/mailman/listinfo/liberationtech
