Re: FF 38.2.1 Passwords

On Sun, 24 Apr 2016 12:36:38 UTC, "Frank-Rainer Grahl" 
<[email protected]> wrote:

> The passwords are stored in logins.json. Check if you find the hostname of the 
> bank there. You should be able to manage them using page info or in preferences 
> using Security->Logins.

FF 38.2.1 seems to be broken in the password management. In my own 
machines, the paswords for those sites are disabled. I can't check my 
brother's system because I am on my way home.

> If they are not there FF might pick them up as form data if they are not properly 
> marked in the banks html.

I think the banks are very careful about things like that (and all of 
them have the problem with 38.2.1, but not with 31.8.0, or earlier, 
and only on my brother's machine, with his old profile, which has been
replaced). 

Users should watch for that, it is a pretty serious exposure.

> FRG
> 
> On Fri, 22 Apr 2016 13:28:39 -0500, Doug Bissett wrote:
> 
> >>I need an answer to this one:
> >>
> >>On my computers I can go to my banking logon page, and I need to enter
> >>the password, as expected (good). 
> >>
> >>On my brother's computer, he goes to his banking logon pages (3 
> >>different banks), and the password is alrady filled in, and it works 
> >>(bad). I can find no trace of them in the Saved password list (I went 
> >>back to 31.8.0, which works as expected), and I am pretty sure that 
> >>there are no cookies with that information. Going back to 38.2.1 
> >>brings them back. Where would that be saved? 
> >>
> >>I cleared the cache. Deleting cookies for the site causes it to 
> >>complain that cookies are not enabled (AFAICT they are).
> >>
> >>I don't want to delete all of the passwords, if possible.
> >>
> >>-- 
> >>From the eComStation of Doug Bissett
> >>dougb007 at telus dot net
> >>(Please make the obvious changes, to e-mail me)
> >>
> 
> 
>  Regards
>  Frank-Rainer Grahl
> 
> 


-- 
From the eComStation of Doug Bissett
dougb007 at telus dot net
(Please make the obvious changes, to e-mail me)