1874397 - Vulnerable passwords sign and notification aren’t being synced

Status: NEW

(Firefox :: about:logins, defect)

Description

[Hani Yacoub, Desktop QA]

Attachment: vulnerable.csv

Found in

• Firefox Nightly 123.0a1

Affected versions

• Firefox 123.0a1
• Firefox 122.0b8
• Firefox 121.0.1

Tested platforms

• Affected platforms: macOS 11.6, Windows 11 x64 and Ubuntu 20.04 x64

Steps to reproduce

1. Go to about:logins and sign in to sync
2. Import the CSV attached in the bug containing vulnerable passwords
3. Open another Firefox, go to about:logins and login with the same account from step 1
4. Observe the passwords

Expected result

• Vulnerable passwords sign and notification should be synced.

Actual result

• Vulnerable passwords sign and notification aren’t being synced.

Regression range

• N/A

Additional notes

• N/A

Comment 1

[BugBot [:suhaib / :marco/ :calixte]]

:hyacoub, if you think that's a regression, could you try to find a regression range using for example mozregression?

Comment 2

[Sergey Galich [:serg]]

Note: vulnerable passwords are based on breached sites and both are not synced, but rather detected on each device using Remote Services for breach data. First step would be to check what stops detection on the second system, are the times of last password update the same in both records?