Firefox users: read here to protect your passwords

[DNW]

Some of you may already know this, but I suspect the majority don't. I recently discovered that it's incredibly easy to view your stored passwords in Firefox. Granted, I don't save sensitive passwords, but there are still some stored in my Firefox profile. Here's how you view your saved passwords: Tools > Options > Security > Saved Passwords > Show Passwords. That's it! There they are, all naked. There are two ways around this: (1) set up a master password (Tools > Options > Security > Use a master password; you'll have to enter this password every time you fire up Firefox); or (2) do not save the password to any site that you don't want people to discover. If you use Firefox at any public place, e.g., work, school, you need to do this now (create a master password, and make it a hard one). If you have a laptop, you also need to do this now (imagine if your laptop is stolen). Heck, I even do this for my home desktop. Why? It's entirely possible for someone to break into my apt and steal my computer. It's a

that Firefox doesn't at least mask or encrypt the saved passwords. They're so easily accessible even a caveman can do it.

 

[Eason]

Thanks for pointing this out, what a giant cock-up.

 

[Wiker]

Lol, I had no idea, thanks!

 

[Thomas]

I had no idea as well

Thanks DNW

 

[Asch]

Keep all your personal stuff, including your Firefox profile, on a TrueCrypt container that mounts at start-up (after you enter your TC password, that is). "Lock" your computer whenever you walk away from it. Do these two things, and even if someone steals your comp or your hard drive, they aren't going to be able to find anything interesting, especially if you put your swap file on the encrypted container as well.

 

[BreakfastPirate]

So... you're surprised that a program you told to automatically enter your passwords for anyone using your computer saves a list of those passwords somewhere?

 

[DNW]

Originally Posted by BreakfastPirate

So... you're surprised that a program you told to automatically enter your passwords for anyone using your computer saves a list of those passwords somewhere?
No. But I'm surprised how easy it is to reveal the passwords. Thanks Asch, I'll look into the TrueCrypt option. I have Win7 Ultimate now, and it has drive encryption, which I use. But having the option to encrypt particular folders is nice.

 

[S. Paul]

whoa. Yeah that was way too easy to show them all - thanks for the heads-up!! Just set a Master password at work...will do this on laptop at home as well.

SP

 

[Gewehr]

Hahaha dude that's an awesome feature!!!
I've gotten many passwords that way haha.

 

[GQgeek]

Originally Posted by DNW

No. But I'm surprised how easy it is to reveal the passwords.

Thanks Asch, I'll look into the TrueCrypt option. I have Win7 Ultimate now, and it has drive encryption, which I use. But having the option to encrypt particular folders is nice.

Don't lose your certificate or you be fucked.

BitLocker is really cool though.

 

[dtmt]

Also, if you want to make your computer run faster, go do the c:\\windows\\system32 directory and delete ntoskrnl.exe

 

[DNW]

Originally Posted by dtmt

Also, if you want to make your computer run faster, go do the c:\\windows\\system32 directory and delete ntoskrnl.exe

That's just ******* mean, man. Some people might take it seriously.

 

[kwilkinson]

Originally Posted by DNW

That's just ******* mean, man. Some people might take it seriously.

They should take it seriously. Doing that upped my productivity by at least 30%

 

[dtmt]

Originally Posted by DNW

That's just ******* mean, man. Some people might take it seriously.

 

[Asch]