Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Shock! Firefox is insafe too! Call the presses, write the blogs!

Go to any page where browser (Chrome or Firefox) pre-fills password. Click on the password, click on "inspect element", change the type of the form input from "password" to, say, "pasword". You just broke the internet security.




For completeness (I assume the answer is yes, but since you weren't clear): Does FireFox have a corresponding settings page with the list of all of the pages it knows a password for?


Yes: preference, security, saved password, show passwords.

You can set a master password, though.



Firefox does have a master password.


I really, really wish there was some way to set it so it wouldn't access your cookies or something unless you put in the master password.

Always seemed like a bit of a flaw that while you can't log in to other sites or view the passwords, you could still access any sites you were already logged in to.


Well, websites control their cookies, so it's up to them to determine how secure they want to be. They can even encrypt them if they wanted to.


No, browsers control their cookies. MLR's point is the ability to password-protect cookies reading and sending, to prevent third-parties from being able to use your account on site you're already logged in


Oh.

That is, actually, pretty nice.




Consider applying for YC's Fall 2025 batch! Applications are open till Aug 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: