Hacker News new | past | comments | ask | show | jobs | submit login

Chrome already uses the OSX Keychain to store passwords. Firefox, on the other hand, stores them as plaintext unless you find and use the option to set a master password.



That's kind of beside the point. While Chrome may store passwords encrypted via Keychain, the problem is it readily displays them to the user via its UI without any re-authentication. Its creators think that any attempts to authenticate users beyond the system login are "theater".

Is this really true for OS X Keychain? Are its admin password prompts for actions like installing system components or displaying secrets in the UI just theater?




Consider applying for YC's W25 batch! Applications are open till Nov 12.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: