PC World Community: Latest Foxmarks Add-On for Firefox ...

Magazine

Subscribe & Get
a Bonus CD

Customer Service

Up to Discussions in News Discussion

9 Replies Last post: Jan 24, 2009 8:02 PM by number6

PCWorld

35,856 posts since
Aug 1, 2007

Dec 12, 2008 2:37 PM

Latest Foxmarks Add-On for Firefox Tackles Password Backups

Post your comments for Latest Foxmarks Add-On for Firefox Tackles Password Backups here

mrlizard13

2 posts since
Dec 13, 2008

1. Dec 13, 2008 1:08 PM

in response to: PCWorld

Re: Latest Foxmarks Add-On for Firefox Tackles Password Backups

Foxmarks is a great add-on for Firefox.

Worth noting that Password-sync has been a feature for a couple of months though

snorg

2,529 posts since
Nov 28, 2007

2. Dec 13, 2008 2:37 PM

in response to: PCWorld

Re: Latest Foxmarks Add-On for Firefox Tackles Password Backups

Ya, like I'm gonna tell some site what all my passwords are.
NOT in this life.

I am Snorg, The Sultan of sadness, The King of chaos, The Master of disaster, The Duke of delirium, The Prince of perturbation. Everyone can chat at Snorg's Chat Room!!

hmijail

1 posts since
Dec 16, 2008

3. Dec 16, 2008 3:34 AM

in response to: PCWorld

Re: Latest Foxmarks Add-On for Firefox Tackles Password Backups

A "security review" which says that AES stands for "automatic edit summaries" is not exactly comforting.

malcarada

9 posts since
Jan 4, 2009

4. Jan 24, 2009 5:08 AM

in response to: PCWorld

Re: Latest Foxmarks Add-On for Firefox Tackles Password Backups

I still think that letting someone getting hold of all your passwords is a really bad idea. Major banks get hacked, if you go and put all eggs in one basket is an open invitation for thinking about ways of getting them.

Bookmark sync is ok, password sync no.

Evildave

1,309 posts since
Jan 24, 2008

5. Jan 24, 2009 9:43 AM

in response to: PCWorld

Re: Latest Foxmarks Add-On for Firefox Tackles Password Backups

I don't store passwords in anything (well, I do have a flash disk that I plug in on occasion that has passwords saved to it).

Nothing that caches passwords is secure.

Here's my scenario. Someone installs this plugin on your unattended (but still logged in machine), backs up your passwords, cleans up, takes them home, and 'restores' them to their own copy of Firefox.

mrlizard13

2 posts since
Dec 13, 2008

6. Jan 24, 2009 2:34 PM

in response to: Evildave

Re: Latest Foxmarks Add-On for Firefox Tackles Password Backups

Evildave wrote:I don't store passwords in anything (well, I do have a flash disk that I plug in on occasion that has passwords saved to it).

How secure!

Nothing that caches passwords is secure.

Here's my scenario. Someone installs this plugin on your unattended (but still logged in machine), backs up your passwords, cleans up, takes them home, and 'restores' them to their own copy of Firefox.

If your machine is left unattended but still logged in, then you're owned anyway.

In the time it takes me to walk up to your computer, download the Foxmarks addon, create a Foxmarks account and turn on the password sync-feature, I could have just clicked Tools > Options > Security > Saved Passwords, and clicked the 'Show Passwords' button.

You're right: nothing that caches passwords is secure. Firefox not only caches them, but will show them to me in just a few clicks.

Evildave

1,309 posts since
Jan 24, 2008

7. Jan 24, 2009 4:29 PM

in response to: mrlizard13

Re: Latest Foxmarks Add-On for Firefox Tackles Password Backups

And most people have bad habits with passwords.

Once you have 'one', you might have all of their passwords.

That quick glance at the list would tell you if they re-use them. So you could have their login, router, retailer, bank, etc. password just by seeing the one repeated password.

So another key lesson is not to re-use passwords. At least not the ones that are more important than others. At least think up and memorize a couple of more passwords for your personal email and bank accounts.