Friends password synced with my account
Hello, I was at a friend last night and logged into my monzilla account on his firefox browser. To my shock all his passwords, over 300 of them, got added to my password… (читать ещё)
Hello,
I was at a friend last night and logged into my monzilla account on his firefox browser. To my shock all his passwords, over 300 of them, got added to my password. I just want to point out here that his passwords were stored locally without an account. As soon as I logged in it started syncing on my account. This is a HUGE SECURITY BREACH and should be addressed immediately. there should at least be a prompt or 2 making sure that I want to add locally stored password to my account or not.
If I had not noticed it at that time I would probably have gotten away with all of his passwords without me or him knowing. I had to manually delete the ~300 entries. makes you think how many times this already happened in the past for others.
Best regards, Remco