I verified this. Here is a script that outputs all Ubuntu Chromium Snap
passwords in plain text, deobfuscating them with the hardcoded password:

https://gist.github.com/nh2/3ddb2db465ec6066a860d10a042dabde

It works on my Ubuntu 24.04 Chromium Snap.

I did not expect that Ubuntu, which comes with a full GUI and thus safe
password storage backend by default, ships a Chromium browser that has
its abilitiy to store passwords safely sandboxed/containerized away.

> You can connect the corresponding interface for that:
>
>   snap connect chromium:password-manager-service

Why is this not the default?

Users do not do that and do not know that it is necessary.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1996267

Title:
  [snap] Doesn't store encrypted passwords unless interface is connected

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/chromium-browser/+bug/1996267/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to