View Plans & Pricing

If you are signed in and are seeing this message, please be sure you have selected a user name in My Profile. The forum requires it.
A A A
Search

— Forum Scope —




— Match —





— Forum Options —





Minimum search word length is 3 characters - maximum search word length is 84 characters

Topic Rating: 0 Topic Rating: 0 Topic Rating: 0 Topic Rating: 0 Topic Rating: 0 Topic Rating: 0 (0 votes) 
sp_TopicIcon
If you use Google Chrome then read this - massive security flaw imo
xandelas
Flounder
Members
Forum Posts: 7
Member Since:
May 30, 2012
sp_UserOfflineSmall Offline
1
November 8, 2012 - 12:18 am
sp_Permalink sp_Print
0

I may be completely nieve for not realising this, but if you use the Save Passwords feature of Google Chrome you can see all of the passwords in plain text by going to Settings -> Advanced Settings, and under Privacy you can click on “Managed Saved Passwords” which will list all of your passwords. You can then highlight a password and click “Show” to see it in plain text. I got the shock of my life to see my MoneyBookers and banking passwords listed there…

And it gets worse… if you use the Sync feature in Chrome they are then transmitted to all other computers you use, so if you login to check your emails at a friend's place, they now have all your passwords.

I'm really careful about choosing strong passwords and not using the same one for forum accounts as I use for gmail or my poker logins, but I just assumed Chrome would be encrypting them and not making them accessible at all, but I guess I'm an idiot. So I'll just have to try and remember them all from now on…

But seriously, how could Google do something as stupid as this and at least not warn you that the password is going to be freely available to anyone who uses any computer you log on to?

bennymacca
Adelaide Australia
Road Gambling with Doyle
Members
Forum Posts: 2616
Member Since:
October 6, 2010
sp_UserOfflineSmall Offline
2
November 8, 2012 - 3:26 am
sp_Permalink sp_Print
0

the thing you are missing is these are your SAVED passwords. so anyone with access to your computer could log into anything you have listed here, because the password is already saved. 

 

but you do make a good point about making sure you dont log in at other places, and making sure your banking password is unique etc

xandelas
Flounder
Members
Forum Posts: 7
Member Since:
May 30, 2012
sp_UserOfflineSmall Offline
3
November 8, 2012 - 4:44 pm
sp_Permalink sp_Print
0

Yeh, but I think there's a difference between being able to log onto a site and being able to quickly grab a list of passwords for later use. I became aware of this when a kid at my son's school used this method to get a girl's Facebook password and then systematically made her life hell. If someone gets your email password they can then go away and gain access to your poker account by using the “Forgot password” option. I think at the very least there should be some warning displayed when you activate this functionality in Chrome.

m@ddm@n
Balla
Members
Forum Posts: 308
Member Since:
June 1, 2012
sp_UserOfflineSmall Offline
4
November 12, 2012 - 8:49 am
sp_Permalink sp_Print
0

From my experience, when you install chrome it asks you if you want to use the sync feature and you have to accept.  Personally, I don't let google auto sign me in or remember my google/gmail password on my PC or any other one that I use.  When I sign in, I make sure to always sign out.  The option to show the passwords in plain text is also in firefox as well btw, and Windows 8 can also sync everything from your IE favourites to your desktop background!  Looks like pretty much every major browser will store any of your saves passwords in their Cloud, so be careful for sure.

Saying this, I think that they should state specifically that passwords are also synced and not just favourites etc!  I never save any really important passwords in browsers as I use an Iphone App that syncs with my PC and has great encryption.

It's hell fun at work though to send sexy messages to the boss from other guys gmail/facebook accounts when they don't sign out and get a coffee 😛

*Always log out of facebook and google/gmail on other computers* 

PS Use a PIN or SMS validation on Stars/FT if you have lots of $$ on there!

Forum Timezone: America/New_York

Most Users Ever Online: 2780

Currently Online:
66 Guest(s)

Currently Browsing this Page:
1 Guest(s)

Top Posters:

bennymacca: 2616

Foucault: 2067

folding_aces_pre_yo: 1133

praetor: 1033

theginger45: 924

P-aire 146: 832

Turbulence: 768

The Riceman: 731

duggs: 591

florianm1: 588

Newest Members:

Tillery999

sdmathis89

ne0x00

adrianvaida2525

Anteeater

Laggro

Forum Stats:

Groups: 4

Forums: 24

Topics: 12705

Posts: 75003

 

Member Stats:

Guest Posters: 1063

Members: 12008

Moderators: 2

Admins: 5

Administrators: RonFezBuddy, Killingbird, Tournament Poker Edge Staff, ttwist, Carlos

Moderators: sitelock, sitelock_1