In Google Chrome has a very solid security breach: any person (even without any technical skills), which is a few minutes will be at your computer can gain access to passwords saved in Google Chrome.
It's enough to open the menu "Settings" >> "Show advanced settings" >> "Passwords and forms" >> "Managing stored passwords". That's all. And do not even need to enter the master password. Do you want to - print, you want - do a screenshot of all the data at a glance.
It turned out that the head of Google Chrome Justin Schuh of the development team aware of this problem, but does not plan to change anything. This position is very saddened by Sir Tim Burns-Lee, inventor of the World Wide Web. And he even gave this issue the title: "How to steal all passwords older sister."
Meanwhile, Google Chrome is one of the most used browsers, along with of Firefox, for example. He has millions of users, and it is considered by many as the main Google product that they can monitezirovat.
Elliott Kember, razrabotchki from New Zealand, who discovered the flaw in the security comments so: «Google Chrome is advertised on YouTube, commercials before movies in the cinema, billboards. Naturally, most of the users of the browser - not developers, and not those who are tightly linked to technology. They do not delve into the settings and do not realize how it works. The system prompts you to save their password and they agree, because it's convenient, and do not realize that their password is so easy to see. It's just not fair. "
In other browsers previously also were opened similar shortcomings with the data retained, but they quickly corrected them. For example, in Firefox and Safari have added the need to enter the master password.
Schuch questions why they do not make the same password, answers: "We have discussed this issue over and over again, but we do not believe that master password protects data well enough, it is a useless function, and we do not want to give users a false sense of security. Let them be prepared for the fact that if someone gets access to their computer and browser - it gets everything! "
However, developers do not agree with this view: "Anyone can open the safe. But in order to reveal a good safe will need a lot of effort, special tools, and more will be a lot of noise and dust. This is a safe criterion of safety - the complexity of its opening. If a user without technical education can gain access to another user's password in just a few clicks, what kind of security you can even talk? "
Passwords stored without any coding in a simple text form is very easy to steal a network.
So next time, think 100 times, if you are willing to share it when you pop up the gray panel with a proposal to save your password to others. A better use professional keeper of passwordsFrom which they are not easy to steal.