Christian Biesinger <[EMAIL PROTECTED]> wrote in message 
news:<[EMAIL PROTECTED]>...
> Igor Bukanov wrote:
> > It looks like there is no way in the current mozilla GUI (0.9.8) to
> > see stored web password, it just shows username(encrypted). This is
> > rather annoying and I am almost ready to patch mozilla to show the
> > passwords themselves. But maybe I am missing something?
> 
> This is a security feature, afaik, so that not somebody that uses your 
> computer can find out about your passwords; more or less the same reason 
> why password input fields display asterisks instead of the actual password.

But what about simply asking for the master password each time the
dialog is shown? IMHO this is rather broken security feature: if
someone can use my mozilla section with the entered master password he
can use all those passwords against all the sites he find in the
password dialog and on Linux some gdb scripts can grab the passwords
from the process memory in any case.

In the mean time I will just patch Mozilla to print the passwords on
the stdout so I can cut/paste :-) and in this way one has to restart
mozilla from a shell window and enter the master password to see them

Regards, Igor

Reply via email to