Me he mudado, a partir de ahora puedes encontrar nuevas historias en:

http://www.control-zeta.es

Como es lógico, de ahora en adelante La Tierra de Uel no se actualizará, perdona las molestias

Por supuesto, todas las nuevas entradas podréis seguirlas a través del RSS de Control-Zeta.es


24 marzo 2006



Un "error" de Firefox causa una separación


Enviar por E-mail



Recordar mis datos (?)



Toda la información personal que dejes aquí será gestionada bajo los términos de Privacidad de Blogger.com Más...



Una mujer ha considerado un error de Firefox su sistema de almacenamiento de passwords, y por eso ha enviado un bug a la página de desarrollo de este proyecto. El problema encontrado fue que pudo acceder a los sitios de contactos para adultos que su pareja (con la que compartía ordenador con Windows XP) habia visitado, y lo que se encontró ha terminado con su relación.
  • Bug 330884: When different users on one system choose to save or not save passwords for sites, any other user can see sites they not only saved passwords for but can also see what other users have been saving/never saving passwords for.
This privacy flaw has caused my fiancé and I to break-up after having dated for 5 years.

Basically, we share one computer but under separate Windows XP user accounts. We both use Mozilla Firefox -- well, he used to use it more than I do but now we don't really use it. The privacy flaw is this: when he went to log-in under his dating sites (jdate.com, swinglifestyle.com, adultfriendfinder.com, etc.), Mozilla promptly asks whether or not he'd like Firefox to save the passwords for him. He chose never, obviously. However, when he logged off his user account, and I logged onto my Windows XP account X amount of days later, I decided to use Firefox because hey -- it loaded everything much more efficiently, was better to work on with website designs and is a lot more stable than IE7beta2.

Firefox prompted whether or not I'd like it to save my password for logging into my website. I chose never and changed my mind. I went into the Password Manager to change the saved password option from Never to Always and that's when I saw all these other sites that had been selected as "Never Save Password." Of course, those were sites I had never visited or could ever dream of visiting.

Then I realized who, how and what... and sh*t hit the fan. Your browser does not efficiently respect the privacy of different users for one system.

Reproducible: Always

Steps to Reproduce:
1. Create 2 unique user accounts (for steps sake, let's call the two accounts Joe and Mary) in Windows XP Home.
2. Logout and sign-in under Joe.
3. Open Firefox and go to an e-mail site or to jdate.com or wherever.
4. Attempt to log-in to the site so that Firefox will ask whether or not you want your password saved.
5. Choose not to save the password.
6. After successfully logging in and having selected the "never save password" option, logout.
7. Log-in as Mary and open Firefox.
8. Browse, browse, browse... but you don't really have to. Just go to "View Saved Passwords," click on the tab that will show you sites to never save passwords for, and you'll see whatever painful site Joe denied to save a password for.
9. Break-up with fiancé.

Firefox should be respecting every single area of privacy per user on one system. It's not doing that... I'm going to submit this as Major because not everyone shares one computer, but it should really be considered Critical.
Aunque el problema es más de Windows que de Firefox, no deja de ser curioso ;-)

Desde otro lugar: menéame.net

Etiquetas: , ,




2 Comentarios a “Un "error" de Firefox causa una separación”

  1. Blogger Alex  llegó el 25 marzo, 2006 10:33 y dijo:    

    Parece ser que es un bug duplicado, ya había constancia de ello. Es por haber tenido una instalación previa sin eliminar el perfil o algo así.

    Lo más curioso es que la tía se queje, cuando ha podido comprobar como era su novio gracias a ese fallo.

  2. Anonymous Manuel  llegó el 25 marzo, 2006 23:42 y dijo:    

    Ahora sólo falta que denuncie a los programadores por haber roto las relaciones con su novio, que la indemnicen por todo el tiempo junto a él xD Saludos,

    Manuel

Pon tu comentario




    Blogosfera La Tierra de Uel

Hemeroteca



Otras cosas