Friends password synced with my account
Hello, I was at a friend last night and logged into my monzilla account on his firefox browser. To my shock all his passwords, over 300 of them, got added to my password… (kàsi)
Hello,
I was at a friend last night and logged into my monzilla account on his firefox browser. To my shock all his passwords, over 300 of them, got added to my password. I just want to point out here that his passwords were stored locally without an account. As soon as I logged in it started syncing on my account. This is a HUGE SECURITY BREACH and should be addressed immediately. there should at least be a prompt or 2 making sure that I want to add locally stored password to my account or not.
If I had not noticed it at that time I would probably have gotten away with all of his passwords without me or him knowing. I had to manually delete the ~300 entries. makes you think how many times this already happened in the past for others.
Best regards, Remco