1565326 - [meta] Login breach/vulnerable alerts/indicators in about:logins

Status: NEW

(Firefox :: about:logins, enhancement)

Comment 1

[Luke Crouch [:groovecoder]]

Note: to test this in the about:logins UI, the saved login must be older than the breach date of the site. To develop and test this manually I had to:

1. Create a new Firefox profile for dev/testing
2. In the profile, save a login for a breached site - e.g., https://eatstreet.com/
3. Close Firefox
4. In the profile's file directory, open the logins.json file - e.g., ~/Library/Application\ Support/Firefox/Profiles/cqr0e53v.mach/logins.json
5. Find the item for eatstreet.com
6. Update its "timePasswordChanged" value to before the breach date - e.g., 1556773200000 is May 2, which is 1 day before the breach of eatstreet.com
7. Save the logins.json file and close it
8. Open Firefox again using the same profile
9. Firefox should show a breach indicator on the saved login for eatstreet.com

Comment 2

[Luke Crouch [:groovecoder]]

Release Note Request (optional, but appreciated)
[Why is this notable]:
This brings Firefox Monitor functionality into the Firefox/Lockwise password manager

[Suggested wording]:
The Lockwise password manager interface includes breach alerts from Firefox Monitor.

SUMO link (not written yet): https://support.mozilla.org/kb/alerts-breached-websites-firefox-lockwise

Comment 3

[Matthew N. [:MattN]]

Removing priority from meta bug as we'll track the work bugs.

Comment 4

[Alice Wyman]

(In reply to Luke Crouch [:groovecoder] from comment #2)

Release Note Request (optional, but appreciated)
[Why is this notable]:
This brings Firefox Monitor functionality into the Firefox/Lockwise password manager

[Suggested wording]:
The Lockwise password manager interface includes breach alerts from Firefox Monitor.

SUMO link (not written yet): https://support.mozilla.org/kb/alerts-breached-websites-firefox-lockwise

Updated SUMO link: https://support.mozilla.org/kb/firefox-lockwise-alerts-breached-websites

Comment 6

[katieC]

Attachment: 01_LockwiseDesktop_Alerts.jpg

Comment 7

[katieC]

Attachment: 02_LockwiseDesktop_ AlertsDetails_SidebarSorts_Icons_Notifications.jpg

Comment 8

[kasonhills11]

To test the functionality in the about:logins UI, where the saved login must predate the site's breach date, follow these steps:

Create a new Firefox profile for development/testing purposes.
Within this profile, save a login for a site known to have been breached, for example, "customstickers.com/".
Close Firefox.
Navigate to the profile's file directory and open the "logins.json" file (for example, at "~/Library/Application Support/Firefox/Profiles/cqr0e53v.mach/logins.json").
Locate the entry for "eatstreet.com".
Change the "timePasswordChanged" value to a date before the site's breach date. For instance, setting it to "1556773200000" corresponds to May 2, which is one day before the breach at "eatstreet.com".
Save and close the "logins.json" file.
Reopen Firefox using the same profile.
Upon doing this, Firefox should display a breach indicator for the saved login on "customstickers".