In few of my earlier tweets I told you about some of the loopholes in the Google Chrome browser. And now I have proof to say I was right.
This one is from Design&Trend.
Google Chrome Update, Store, For Mac: Security Breach, Lack of Protection, Passwords Exposed
Google Chrome allows anyone using your computer to see the plaintext web passwords stored by your browser.
As Wired explains, this is not a security bug; but rather, Google Chrome's documented behavior. On Wednesday, U.K. software developer Elliot Kember posted a blog highlighting the issue. His blog was picked up by Hacker News, and the problem was brought to public attention.
Google Chrome's security chief Justin Schuh spoke out against the criticism, writing, "The only strong permission boundary for your password storage is the OS user account. So, Chrome uses whatever encrypted storage the system provides to keep your passwords safe for a locked account. Beyond that, however, we've found that boundaries within the OS user account just aren't reliable, and are mostly just theater."
His entire statement can be read here.
Other browsers fail to employ extra security as well. For example, Mozilla's Firefox browser gives a user dialog that asks, "Are you sure you want to show your passwords?" without asking for further verification.
According to Apple Insider, Mac's Safari employs extra security. The browser pops up a dialog requiring that a user enters the password for the currently logged-in ID of the computer. Without the user ID, Safari will not show the passwords.
There are experts saying that Chrome's password manager is not at all reliable.
Here's one more from KEYE TV.
A warning to web users about a popular browser: Google Chrome has a serious vulnerability. And the maker doesn't plan to fix it. If you're not in the habit of locking up your computer with a password, you may want to-- especially if you're using Google Chrome internet browser. Google chrome is now the world's most popular browser, just recently edging Microsoft's Internet Explorer. But Chrome has a security problem. A few clicks of the mouse and you can call up all the passwords you have stored on the browser. And they're in plain English. Google says it is aware of the issue but doesn't plan to fix it. Justin Schuh, a security chief with Google, tells Hacker News that Google doesn't want to provide users with a false sense of security and encourage risky behavior. It wants users to know that once someone has access to your machine, they can get at everything ... and that includes your chrome passwords. So what can you do to protect your passwords? Sorry-- but it comes down to two simple rules: lock your computer with a password and don't save your passwords to Google Chrome.
Read More at: http://www.keyetv.com/news/features/top-stories/stories/google-chrome-design-exposes-passwords-11043.shtml
Read More at: http://www.keyetv.com/news/features/top-stories/stories/google-chrome-design-exposes-passwords-11043.shtml
The security system of Chrome deserves to be criticized.
Not just these two, there are many websites, newspapers and experts mentioning the problems in Chrome's System.
I request Google to repair this as soon as possible. And. remember I was the first one to reveal it.
No comments:
Post a Comment