Hi, Am 10.10.2015 um 16:41 schrieb Anton Aylward:
On 10/10/2015 10:20 AM, Carlos E. R. wrote:
What makes you think they are stored in the clear, even without a master password?
If you look at the files under your Profile you'll see 'signons.sqlite'. The account information is kept there.
There are various tools you can use to inspect that file, but you will see a table 'moz_logins' with an entry for each account. The passwords are there encrypted.
They are encrypted whether or not you use a master password!
hmm, they are more obfuscated. Everyone with access to your Mozilla directory can read them. Probably not easily but still. All you need to decrypt the passwords is in the profile. With a master password this is not the case. People can copy your whole profile but cannot decrypt the passwords w/o brute force password attacks. Wolfgang -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org