381035 - Passwords... stored by Firefox are displayed too easily by SIW.

Status: RESOLVED DUPLICATE of bug 352692

(Toolkit :: Password Manager, defect)

Description

[jlb]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; fr; rv:1.8.1.3) Gecko/20070309 Firefox/2.0.0.3
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; fr; rv:1.8.1.3) Gecko/20070309 Firefox/2.0.0.3

The free tool (siw.exe: System Info for Windows)displays the passwords, URL, username... stored by Firefox. Launch siw, then go to Software, Secrets. That's all!

Reproducible: Always

Steps to Reproduce:
1.Download siw.exe (http://www.gtopala.com/siw-download.html)
2.Launch siw.exe
3.Go to Software, Secrets. All is on the screen
Actual Results:  
Resource Type, Resource Name,User Name, Password, Company Name are displayed on the screen

Expected Results:  
I expect from Firefox an efficient protection of these information or, if it is not possible,  a clear information to the user that "Resource Type, Resource Name,User Name, Password, Company Name" can be displayed without effort.

Comment 1

[Daniel Veditz [:dveditz]]

Use a "Master Password" which uses triple-DES encryption. Otherwise it's merely scrambled.

Older versions of Netscape and the Mozilla Suite used to make this distinction clear when you saved your first password, but Firefox folks chose to streamline the interface.

Comment 2

[jlb]

OK, effectively with the "Master Password" all works fine.

thanks

jean-luc