Comment #148 on issue 1397 by fabien.coelho: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
This is a joke...
Chromium communicates heavily about its secure design, but user passwords
are stored
unencrypted.
Worse, two years later, the priority 2 (it
Comment #147 on issue 1397 by jjgove: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
This is definitely an important security feature. There is no way that
I'll save any
of my passwords in Chromium until there is a master password and strong
password
Comment #145 on issue 1397 by dkarter: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
The more I use Google Chrome, the more I feel that I need to go back to
Firefox because
of the lack of privacy with passwords. If you can't make it then at least
disable
Comment #143 on issue 1397 by opodaniel: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
For all people who want master-password, please feel free to suggest it
here
Comment #144 on issue 1397 by venkataram...@chromium.org: Master password
is missing
http://code.google.com/p/chromium/issues/detail?id=1397
Issue 30780 has been merged into this issue.
--
You received this message because you are listed in the owner
or CC fields of this issue, or because you
Comment #140 on issue 1397 by jca.viborg: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
In the Linux version of Google Chrome (4.0.249.30) the PW is stored
unencrypted in
the Web Data file, ~/.config/google-chrome/Default/Web Data
When Chrome comes with a
Comment #141 on issue 1397 by giovannitedaldi: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
Web Data is really an interesting file, talking technically of security,
I'd say about
0.
And there's no need of a master password?? -.-'
LOL
--
You received this
Comment #142 on issue 1397 by KnaveX: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
With extensions here, all you need is to get master password.
Then I will switch.
--
You received this message because you are listed in the owner
or CC fields of this issue,
Comment #133 on issue 1397 by giovannitedaldi: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
I really think that if chrome won't have a master password it will be soon
sweep off
my pc, because that's really an huge security hole.
--
You received this
Updates:
Labels: -Security
Comment #134 on issue 1397 by skyli...@chromium.org: Master password is
missing
http://code.google.com/p/chromium/issues/detail?id=1397
*Sigh*
--
You received this message because you are listed in the owner
or CC fields of this issue, or because you starred
Comment #135 on issue 1397 by maxthelen: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
I this topic is losing focus as a result of non-engineer anger and
engineering tunnel
vision. There is a lot of talk about enormous security holes on one side
and
Comment #136 on issue 1397 by maxthelen: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
Typo: I think* this..
Apologies.
--
You received this message because you are listed in the owner
or CC fields of this issue, or because you starred this issue.
You may
Comment #137 on issue 1397 by giovannitedaldi: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
I consider it as a security hole because if your pc get stolen and your
user is
already logged in, the thief could also access to all the services you have
saved
Comment #138 on issue 1397 by david.lebel: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
I don't know if it has been pointed out, but if someone steal your laptop,
he or she
doesn't need access to the password to log onto you PC. Just boot with
recovery
Comment #119 on issue 1397 by fabios4rulez: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
Suggestion for the UI: what about asking for set a master password the
first time you
open stored password if a master password is missing? it should be a dialog
in
Comment #120 on issue 1397 by wolfgang.kronberg: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
I believe that resolving this issue within the context of issue 812 is
possible.
However, it introduces new requirements to issue 812 which haven't been
Comment #121 on issue 1397 by nodens2099: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
About the plain-text passwords on disk : AFAIK, password aren't currently
encrypted
on Linux (or MacOS). the encryptor functions are just placeholders :
Comment #122 on issue 1397 by yurkennis: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
If this issue is merged into issue 812, should a separate issue be created
for be able
to legitimately migrate Chrome with its saved passwords to another machine
if I
Comment #123 on issue 1397 by philipbe...@gmail.com: Master password is
missing
http://code.google.com/p/chromium/issues/detail?id=1397
Can I just add my two cents by saying, in real life, I will often lend my
laptop to
friends who just need to check email. I am not bothered about
Comment #124 on issue 1397 by SarekOfVulcan: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
We're not going to try and help an edge case for users too lazy to hit
Win-L.
Nice way to condescend to your users. As I stated previously, my employer
has my
Comment #128 on issue 1397 by c...@chromium.org: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
We hear you.
We'll take another look at this. Please do not add comments that are
effectively the
same of one of the previous 127 comments. You can star the
Comment #107 on issue 1397 by maruelatchromium: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
@GraemeErickson and others:
https://help.ubuntu.com/7.04/keeping-safe/C/lock-screen.html
I totally agree with Peter, a master password doesn't buy you any
Comment #108 on issue 1397 by pkast...@chromium.org: Master password is
missing
http://code.google.com/p/chromium/issues/detail?id=1397
@105/106: It's reasonable to suggest that a profile which required a login
would also
require a second login to show the saved passwords. That's not
Comment #109 on issue 1397 by haridara: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
My interest in the master password comes from the fact that firefox doesn't
encrypt
the passwords on disk unless a master password is set (which means, without
a master
Comment #110 on issue 1397 by vand...@chromium.org: Master password is
missing
http://code.google.com/p/chromium/issues/detail?id=1397
I understand the general sentiment that even with a master password, if you
can use
the machine as a particular user their passwords are effectively
Comment #111 on issue 1397 by jstigall: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
Nobody on the dev team has ever let their friends use their computer
for 'just a sec to check my email?'. It's so
insecure in chrome that they could find all of your
Comment #112 on issue 1397 by pkast...@chromium.org: Master password is
missing
http://code.google.com/p/chromium/issues/detail?id=1397
@109/110: As I alluded to, we use the Windows crypto routines to encrypt
your passwords
on disk. Someone who takes your physical drive has to log in as
Comment #113 on issue 1397 by opodaniel: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
Seems some developers have a personal relation with their computers that
no one can
touch and see. Anyway, till master password is implemented, I personally
will not
Comment #114 on issue 1397 by estmatic: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
@pkasting, could you elaborate on what the UI complexity problem is? I
don't disagree that a master password
doesn't greatly improve security, but even if it improves it
Comment #115 on issue 1397 by ogourment: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
I would like to describe an actual use case: I have iTunes on my machine
and remote
speakers. I sometimes play music for the whole family to hear. When I leave
the
Comment #116 on issue 1397 by ogourment: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
Hello Was this Pri-2 issue just closed into a Pri-3 one? Hello...??
--
You received this message because you are listed in the owner
or CC fields of this issue, or
Comment #117 on issue 1397 by haridara: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
Does chrome use DAPI to protect passwords written to disk? See:
http://msdn.microsoft.com/en-us/library/ms995355.aspx
--
You received this message because you are listed
Comment #118 on issue 1397 by haridara: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
Typo... I meant, DPAPI.
--
You received this message because you are listed in the owner
or CC fields of this issue, or because you starred this issue.
You may adjust your
Comment #102 on issue 1397 by nema.arpit: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
Interesting.. more than an year has passed since the issue has been raised
and not much
has been done so far...
Shouldn't chrome atleast stop storing passwords
Updates:
Status: Assigned
Owner: sidc...@chromium.org
Comment #96 on issue 1397 by sidc...@chromium.org: Master password is
missing
http://code.google.com/p/chromium/issues/detail?id=1397
(No comment was entered for this change.)
--
You received this message because you are
Comment #91 on issue 1397 by atomhead: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
Chrome needs a master password before I switch from FF.
--
You received this message because you are listed in the owner
or CC fields of this issue, or because you starred
Comment #90 on issue 1397 by sebbe...@gmail.com: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
What about an OpenID account for the MasterPassword?
--
You received this message because you are listed in the owner
or CC fields of this issue, or because you
Comment #89 on issue 1397 by langturk: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
I couldn't use Chrome on my netbook even if i want it to use so much
because there is
not any master password and i don't want to use third party applications to
store
Comment #88 on issue 1397 by d...@chromium.org: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
Issue 53 has been merged into this issue.
--
You received this message because you are listed in the owner
or CC fields of this issue, or because you starred this
Comment #70 on issue 1397 by stpasha: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
There should be an easy way to end your master password session without
actually
closing the browser.
Consider the following scenario: you opened the browser, entered your
Comment #71 on issue 1397 by wolfgang.kronberg: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
@stpasha: I agree, so I just added this feature to the design doc (see new
final
paragraph of the section 'Setting the master password').
--
You received this
Comment #69 on issue 1397 by m...@chromium.org: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
Issue 9741 has been merged into this issue.
--
You received this message because you are listed in the owner
or CC fields of this issue, or because you starred
Comment #61 on issue 1397 by sebbe...@gmail.com: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
What about a MasterPassword that could be local-only, OR sync'd with a
Google Account.
--
You received this message because you are listed in the owner
or CC
Comment #62 on issue 1397 by dabreaka: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
#60, What about people that do not have Google Accounts?
are there really people that dont have a google account these days?
especially people
that are using a browser
Comment #63 on issue 1397 by clive386: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
I'm sure there are lots of people that agree that a web browser should
function just
as well offline as it does online. I for one would prefer my browser to be
Comment #64 on issue 1397 by toonse: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
Is any movement happening now that a design document is out? What is being
waited
for on this issue? Someone to take it?
--
You received this message because you are
Comment #65 on issue 1397 by wolfgang.kronberg: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
Commenting comment #64: Yes, work is currently being done. DarkHearth has
obtained
permission to modify the design doc so that he can add screenshots, and
Comment #66 on issue 1397 by DarkHearth: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
Well, I wasn't trying to force the google account as a master password,
just an extra
feature you know? A simple check box 'Use Google Account' while setting a
master
Comment #67 on issue 1397 by toonse: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
Does the chromium runtime already have a database system in place that can
be
leveraged? I would assume so since I saw some signs of it in my SVN sync.
Just curious
--
Comment #68 on issue 1397 by sebbe...@gmail.com: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
I'm all agree with comment 66.
comment 67 database system ? Like Gears maybe?
--
You received this message because you are listed in the owner
or CC fields of
Comment #60 on issue 1397 by toonse: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
A comment on #56.
What about people that do not have Google Accounts? I would not like to
see this
limited or tied in any way to forcing someone to get an account
Comment #57 on issue 1397 by DarkHearth: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
In fact I think that idea is quite good, that way the master password would
be stored
somewhere outside the computer increasing the security and would give lots
of
Comment #59 on issue 1397 by toonse: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
A bit of history. I have tried Chrome numerous times and liked it every
time other
than all of my passwords are plain text. This drives me back to Firefox.
Just
Comment #56 on issue 1397 by sebbes77: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
In fact, going even further, I'd love to see chrome asking for my Google
Account
credentials before allowing access to any saved password. (so that even
relatives
Comment #52 on issue 1397 by paybakuk: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
We the hairy masses obviously want a master password. So, what is happening
about it?
Can we expect this feature in the next release? Does anyone know of it's
status on
Comment #53 on issue 1397 by DarkHearth: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
I recently went through the design doc and I would like to add some screen
shots to the master password set,
change and remove process. Who do I ask for permission to
Comment #54 on issue 1397 by wolfgang.kronberg: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
@DarkHeath: since abarth has not yet assigned anybody for any of the open
points, you
can ask me. Please use email: my username @gmail.com.
--
You received this
Comment #50 on issue 1397 by DarkHearth: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
I don't know about everyone else but since I started University my
personal computer lost its personal. I have friends staying over,
teammates coming for meetings and I
Comment #51 on issue 1397 by puttachinku: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
ya same here
even i'm a home user i prefer ideas like master password,or different
password protected user login.because my sister is an MBA student and she
uses
Comment #47 on issue 1397 by wolfgang.kronberg: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
The first version of the design doc is finished and can be viewed here:
http://docs.google.com/Doc?id=dhn2skdg_1fwvbb3cb
@abarth: please organize some people to
Comment #48 on issue 1397 by aba...@chromium.org: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
Thanks. I'll take a look at the doc. I can't really appoint people to
help out
with this feature. If you want this to happen, you're going to have to
drive
Comment #46 on issue 1397 by wolfgang.kronberg: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
I will start a design doc, which will contain some gaps in areas in which
I'm not
sufficiently expert. The doc will be published here, with experts being
Comment #44 on issue 1397 by wolfgang.kronberg: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
Putting comment #36 into a more technical view: Nobody should be able to
see my
stored passwords unless they either know my master password (not stored
anywhere
Comment #45 on issue 1397 by aba...@chromium.org: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
Wolfgang: You seem to have a strong technical grasp of this issue. The
next step in
moving this bug forward is to create a design doc (hence the
Comment #42 on issue 1397 by divi...@hotmail.com: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
Add label - Mstone 2.0.
This really needs to be here for 2.0.
--
You received this message because you are listed in the owner
or CC fields of this issue, or
Comment #40 on issue 1397 by subhash.kishan: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
master password option is missing so priority should be given to it.so
please anyone
say whether i was wrong
--
You received this message because you are listed in
Comment #41 on issue 1397 by progame: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
ow i have a better idea
make this issue read-only just like the addon-system issue :)
--
You received this message because you are listed in the owner
or CC fields of this
Comment #39 on issue 1397 by de...@chromium.org: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
Issue 6185 has been merged into this issue.
--
You received this message because you are listed in the owner
or CC fields of this issue, or because you starred
Comment #36 on issue 1397 by amandel.seril: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
To add my own tuppence, and possibly sway the course of the discussion:
By analogy: If I install a lock on my business's front door, I do so in
expectation that the
Comment #37 on issue 1397 by dabreaka: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
you couldn't have expressed the issue in a better way amandel.seril
--
You received this message because you are listed in the owner
or CC fields of this issue, or because
Comment #35 on issue 1397 by crocca: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
This can be assigned as a security issue for one reason. On office
networks, usually
the WinXP administrator password is something like 'admin' or 'admin123',
or even
Comment #34 on issue 1397 by srornat: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
I uninstalled Chrome several months because of the lack of a Master
Password. Imagine
my dissapointment when I downloaded the recent Gold version and found
that the
Comment #33 on issue 1397 by m.zadrazil: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
I used Firefox also to store my passwords site related straightforward, so
this is a
very important feature.
In firefox you can also type in the webpage and get the
Comment #32 on issue 1397 by [EMAIL PROTECTED]: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
This is an issue and a security risk. Someone walking
away from their computer without locking it should not
consequently put at risk every single
Comment #31 on issue 1397 by jspeavey: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
Abarth, from my understanding - the firefox utility you reference *does not*
circumvent the Firefox master password, it is simply a brute-force guesser
no
different than
Comment #29 on issue 1397 by [EMAIL PROTECTED]: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
It seems the master password in Firefox can also be circumvented using a
command line
utility:
Updates:
Status: Untriaged
Labels: Security
Comment #25 on issue 1397 by [EMAIL PROTECTED]: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
I'm confirming this issue as there is indeed no master password.
jspeavey, would you consider this
Comment #26 on issue 1397 by [EMAIL PROTECTED]: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
An option to use a master password (like the one in Firefox) is desperately
needed.
Also, if someone can say..why is there no progress (very slow progress -
0-3
Comment #27 on issue 1397 by [EMAIL PROTECTED]: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
Hey [EMAIL PROTECTED],
what a useless question are u asking security means, secure as far as
possible,
what is the use of dummy master password, if that is
Comment #28 on issue 1397 by [EMAIL PROTECTED]: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
No [EMAIL PROTECTED], we need a master password system like the one
available in
Firefox.
--
You received this message because you are listed in the owner
or CC
Comment #24 on issue 1397 by jspeavey: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
Until this issue is addressed, I will not be using chrome nor will I allow
it to be
used in my company. For those arguing that this is just 'security through
obscurity'
Comment #23 on issue 1397 by suteanfx: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
if it had no master we can not save all most password.
--
You received this message because you are listed in the owner
or CC fields of this issue, or because you starred
Issue 1397: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
Comment #22 by jasonwasser:
Please add the master password feature.
--
You received this message because you are listed in the owner
or CC fields of this issue, or because you starred this issue.
Issue 1397: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
Comment #21 by rthandy:
Like the browser, would probably use it as default IF IT HAD A MASTER
PASSWORD
--
You received this message because you are listed in the owner
or CC fields of this issue,
Issue 1397: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
Comment #20 by Cramwinckel:
Except for not having a Mac OS X version, this is the mayor show stopper
for me as well.
--
You received this message because you are listed in the owner
or CC fields
Issue 1397: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
Comment #19 by mdschulte:
A master password is absolutely essential for a modern browser. Without a
master
password, all of the benefits of using Chrome essentially get flushed down
the
toilet.
Issue 1397: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
Comment #18 by sean.aitken:
This is interesting. Security Now (Steve Gibson / Leo Laparte) talked about
Chrome
quite a bit in a recent episode (www.grc.com). I was shocked to hear that
the saved
Issue 1397: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
Comment #17 by s.shankar84:
Guys, Is there a comment from google on this. The encryption of passwords
in RAM and
a master password is a real necessity. Also I think the master password
should be
Issue 1397: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
Comment #16 by newkamran:
I liked the interface but missing Password Manager Master Password has put
me down
and I am now looking at Firefox skins to make it look like chrome... What a
shame...
Issue 1397: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
Comment #15 by hyaduvanshi:
Same here. I rely heavily on master passwords when I surf the internet. And
the
absence of the master password is the only missing thing in google chrome.
All the
other
Issue 1397: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
Comment #12 by r.dechenaux:
virus have access to our password if not encrypted .. so you can't save
password
until this is implemented.
--
You received this message because you are listed in the
Issue 1397: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
Comment #13 by lintux:
@r.dechenaux: For viruses there will always be ways to get your passwords.
Encrypting
them on disk doesn't help if they will still be in RAM in cleartext.
--
You received
Issue 1397: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
Comment #14 by varun533:
I agree that this is a very important feature. While testing out Chrome, I
was happy
overall, but this was the only reason I could not use it as a primary
browser as I
Issue 1397: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
Comment #11 by rushy2uk:
I agree, a complete deal-breaker, as I cannot use this browser for
day-to-day stuff
until this is implemented.
--
You received this message because you are listed in the
Issue 1397: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
Comment #9 by adam.kocse:
This is a security issue.
It should be of the highest priority to require some kind of authentication
in order
to access the stored passwords. I also think it goes without
Issue 1397: Master password is missing
http://code.google.com/p/chromium/issues/detail?id=1397
Comment #5 by David.Peacham:
Master password is such an essential feature I cannot believe Chrome has
been
launched without it.
Currently I am using Chrome to access my Google services, and for
96 matches
Mail list logo
