[ubuntu-uk] Warning to all users of Samba

[Alan Lord (News)]

On 20/04/10 20:13, Alan Pope wrote:
<snip />
>> Well, i have sure learnt my lesson, can anyone tell me what can be gained
>> from my user area in terms of web-passwords? Are they stored in .mozilla
>> folder and easy to get to?
>
> They're in plain text, yes.
>
> http://support.mozilla.com/en-US/forum/1/582526 - "where does firefox
> store saved passwords"

Are you *sure* they are in plain text?

Since Gecko 1.9 Mozilla use nsILoginManager to store and retrieve 
passwords in the Password Manager:

https://developer.mozilla.org/en/XPCOM_Interface_Reference/Using_nsILoginManager

This in turn relies on a storage module:

http://mxr.mozilla.org/mozilla-central/source/toolkit/components/passwordmgr/src/storage-mozStorage.js

which, as you can see does use cryptography.

Cheers

Al.

-- 
The Open Learning Centre
http://www.theopenlearningcentre.com