clearing saved passwords possible without master password
Bug #382107 reported by
beh
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Mozilla Firefox |
Won't Fix
|
Wishlist
|
|||
firefox-3.0 (Ubuntu) |
Invalid
|
Wishlist
|
Unassigned |
Bug Description
When Clearing private data (Tools ->Clear Private Data...), it shouldn't be possible to remove saved passwords without entering Master Password (if used).
To reproduce
Make a new FF profile (so that you don't lose your passwords), save some passwords with master pw enabled, and delete them with Clear private data -dialog. You can even restart Firefox so that you haven't entered the master pw before deletion.
tested in
Firefox 3.10
Kubuntu 9.04 64bit
Changed in firefox: | |
status: | Unknown → New |
Changed in firefox: | |
status: | New → Confirmed |
Changed in firefox: | |
status: | Confirmed → Won't Fix |
Changed in firefox: | |
importance: | Unknown → Wishlist |
To post a comment you must log in.
Firefox 1.5 no longer has a "Clear All" button.
If someone has physical access to a computer, there will always be a way for them to remove traces of their actions. It's just a question about how much you want to pretend that they can't, and how noticeable the deletion will be after the fact.
See bug 266945 for a Password Manager specific discussion.