Embed Notice

HTML Code

<blockquote style="position: relative; padding-left: 55px;"><section><a href="https://digitalcourage.social/users/cryptgoat/statuses/112336176001716796">CryptGoat (cryptgoat@digitalcourage.social)'s status on Friday, 26-Apr-2024 22:27:22 JST</a><a href="https://digitalcourage.social/@cryptgoat" title="cryptgoat@digitalcourage.social"><img src="https://gnusocial.jp/avatar/203446-48-20231108191825.webp" width="48" height="48" alt="CryptGoat" style="position: absolute; left: 0; top: 0;">CryptGoat</a></section><article><p>Did you know that the <a href="https://digitalcourage.social/tags/Snap" rel="tag">#Snap</a> version of <a href="https://digitalcourage.social/tags/Chromium" rel="tag">#Chromium</a> (included by default in <a href="https://digitalcourage.social/tags/Ubuntu" rel="tag">#Ubuntu</a>) saves all your <a href="https://digitalcourage.social/tags/passwords" rel="tag">#passwords</a> as plain text? 🤦<br><a href="https://bugs.launchpad.net/ubuntu/+source/chromium-browser/+bug/1996267" rel="nofollow noreferrer">https://bugs.launchpad.net/ubuntu/+source/chromium-browser/+bug/1996267</a><br><a href="https://digitalcourage.social/tags/Linux" rel="tag">#Linux</a> <a href="https://digitalcourage.social/tags/Security" rel="tag">#Security</a></p></article><footer><a rel="bookmark" href="https://gnusocial.jp/conversation/2996705#notice-5952446">In conversation</a><time datetime="2024-04-26T22:27:22+09:00" title="Friday, 26-Apr-2024 22:27:22 JST">about 7 months ago</time> <span>from <span><a href="https://digitalcourage.social/@cryptgoat/112336176001716796" rel="external" title="Sent from digitalcourage.social via ActivityPub">digitalcourage.social</a></span></span><a href="https://digitalcourage.social/@cryptgoat/112336176001716796">permalink</a><h4>Attachments</h4><ol><li><article><header><div>Domain not in remote thumbnail source whitelist: bugs.launchpad.net</div><h5><a href="https://bugs.launchpad.net/ubuntu/+source/chromium-browser/+bug/1996267">Bug #1996267 “[snap] Doesn't store encrypted passwords unless in...” : Bugs : chromium-browser package : Ubuntu</a></h5><div></div></header><div>In the Snap package of Chromium, Chromium is not protecting passwords with gnome-keyring (or KWallet).As a result, copying the Chromium profile directory from the snap directory gives access to all stored passwords. This is a HIGH security risk. Regular users who are used to storing their passwords in browsers are probably unaware of this.Note that Chromium is started with the command line option “--password-store=basic”. This hack should never have been released to the public.The Chrom...</div><footer></footer></article></li></ol></footer></blockquote>

Corresponding Notice

Embed this notice
CryptGoat (cryptgoat@digitalcourage.social)'s status on Friday, 26-Apr-2024 22:27:22 JST CryptGoat
Did you know that the #Snap version of #Chromium (included by default in #Ubuntu) saves all your #passwords as plain text? 🤦
https://bugs.launchpad.net/ubuntu/+source/chromium-browser/+bug/1996267
#Linux #Security
In conversationabout 7 months ago from digitalcourage.socialpermalink
Attachments
1. Domain not in remote thumbnail source whitelist: bugs.launchpad.net
  Bug #1996267 “[snap] Doesn't store encrypted passwords unless in...” : Bugs : chromium-browser package : Ubuntu
  In the Snap package of Chromium, Chromium is not protecting passwords with gnome-keyring (or KWallet). As a result, copying the Chromium profile directory from the snap directory gives access to all stored passwords. This is a HIGH security risk. Regular users who are used to storing their passwords in browsers are probably unaware of this. Note that Chromium is started with the command line option “--password-store=basic”. This hack should never have been released to the public. The Chrom...

Public

Embed Notice

HTML Code

Corresponding Notice