Firefox And Opera Are Leaking Sensitive Data

Discussion in 'other software & services' started by Tyrizian, Feb 18, 2013.

Thread Status:
Not open for further replies.
  1. Tyrizian

    Tyrizian Registered Member

    Joined:
    Apr 26, 2012
    Posts:
    2,806
  2. Mrkvonic

    Mrkvonic Linux Systems Expert

    Joined:
    May 9, 2005
    Posts:
    8,702
    And why is this an issue?
    Mrk
     
  3. NGRhodes

    NGRhodes Registered Member

    Joined:
    Jun 23, 2003
    Posts:
    2,331
    Location:
    West Yorkshire, UK
    So the issue is its storing screenshots in the users local profile/home, then stating "various users" can access it, without any qualification of what "various users" means or how that data is leaked.

    Firefox by default caches ssl secure pages.
    SSL is only concerned with in transit security (no extra layer of security is given once the information is displayed on the users browser).

    Cheers, Nick
     
  4. Mrkvonic

    Mrkvonic Linux Systems Expert

    Joined:
    May 9, 2005
    Posts:
    8,702
    If someone has local access to user's browser cache, then the problem is bigger than any would-be leak of data. And it's not a leak of data, because it goes nowhere, hence no leak.
    Mrk
     
  5. TheWindBringeth

    TheWindBringeth Registered Member

    Joined:
    Feb 29, 2012
    Posts:
    2,089
    Clicking through to http://www.geek.com/articles/news/f...till-leaking-sensitive-personal-data-2013027/...

    The bug report in question: https://bugzilla.mozilla.org/show_bug.cgi?id=755996#c13, read out from there. Storing thumbnails for *any* site including those loaded via HTTP can result in something being persisted that shouldn't have been.
     
Loading...
Thread Status:
Not open for further replies.