*** This bug is a security vulnerability ***

You have been subscribed to a public security bug by Jamie Strandboge 
(jdstrand):

Binary package hint: firefox

When a web page prompts you for the answer to a question you have
previously answered, Firefox prompts you with that previous answer. This
has serious security implications when it comes, for instance, to
password recovery.

Example:
I forgot my online banking password yet again, so I go through the recovery 
process and find that Firefox tells me the answers as soon as I type the first 
letter. This means that anyone with physical access to the computer can change 
my password.

What is needed is a simple and obvious method (i.e. NOT using
about:config!) to disable Firefox's memory of previously typed responses
for certain pages/sites, but without disabling it globally because it is
otherwise a very useful feature.

** Affects: firefox (Ubuntu)
     Importance: Undecided
         Status: New

-- 
Firefox prompts with correct answers during online banking password recovery 
process
https://bugs.launchpad.net/bugs/231252
You received this bug notification because you are a member of Ubuntu Bugs, 
which is a direct subscriber.

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to