Form history sometimes remembers credit card details
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
firefox (Ubuntu) |
Expired
|
Undecided
|
Unassigned |
Bug Description
This isn't a bug report as such, but this is a potential security issue. Unfortunately, I don't know if there's an easy answer to this.
I only use the internet for purchases sparingly, but I've noticed that on some web pages that remember credit/debit card details, Firefox remembers the card number and security code as form history - and also, depending on how the web page is designed, the expiry date. It's an easy matter to clear private data, but this isn't something a newbie is likely to think of doing. (Okay, I know that Ubuntu by default requires you to log in with a password before you can get anywhere near the data kept by Firefox, but I worry that if, say, a laptop was stolen, it wouldn't be too hard to by-pass the password protection and access this data.)
I'm happy to give examples of web sites that behave this way, but I'd rather not leave it somewhere publicly accessible. (Is there an e-mail address I could privately send that?)
Is there any way firefox can be set up to not remember credit card details you have entered by default?
ProblemType: Bug
DistroRelease: Ubuntu 11.04
Package: firefox 5.0+build1+
ProcVersionSign
Uname: Linux 2.6.38-8-generic x86_64
Architecture: amd64
Date: Fri Jun 24 16:14:11 2011
FirefoxPackages:
firefox 5.0+build1+
flashplugin-
adobe-flashplugin N/A
icedtea-plugin 1.1~20110420-
InstallationMedia: Ubuntu 10.10 "Maverick Meerkat" - Release amd64 (20101007)
ProcEnviron:
LANGUAGE=en_GB:en
LANG=en_GB.UTF-8
SHELL=/bin/bash
SourcePackage: firefox
UpgradeStatus: Upgraded to natty on 2011-05-08 (47 days ago)
security vulnerability: | yes → no |
visibility: | private → public |
Christopher,
We are sorry that we do not always have the capacity to review all reported bugs in a timely manner. You reported this bug in 2011 and there have been many changes in Ubuntu since that time.
Do you still see this problem in the currently supported releases of Ubuntu and Firefox? Please let us know if you do.
If we do not hear from you the bug report will close itself in approximately 60 days time.
Thank you for helping make Ubuntu better.
Paul White
[Ubuntu Bug Squad]