Comment 5 for bug 1996267

Revision history for this message
Erlenmayr (erlenmayr) wrote (last edit ):

What is there to prove? The documentation *literally* says it is plain text.

Also: Any attacker can just copy the entire browser profile to another machine and then access the passwords. So he does not have to care about the implementation details of the password storage at all.

On the other side, normal Chrome/Chromium (without Snap and this command line argument) is using Gnome Keyring to protect the passwords. In that case, the attacker would need the login password or a equivalent secret from PAM and friends.