Open Menu
AllLocalCommunitiesAbout
lotide
AllLocalCommunitiesAbout
Login

Microsoft Edge loads your passwords into memory in plaintext, but Microsoft says not to worry

⁨70⁩ ⁨likes⁩

Submitted ⁨⁨1⁩ ⁨week⁩ ago⁩ by ⁨Lemmynated@lemmy.zip⁩ to ⁨technology@lemmy.zip⁩

https://www.windowscentral.com/microsoft/microsoft-edge-will-load-all-your-passwords-into-memory-in-plaintext-but-microsoft-says-its-not-a-security-concern

source

Comments

Sort:hotnewtop
  • Romkslrqusz@lemmy.zip ⁨1⁩ ⁨week⁩ ago

    Access to browser data as described in the reported scenario would require the device to already be compromised.

    Encrypting passwords / loading them into memory on an as-requested basis limits the scope of what gets compromised on a compromised device. The “performance” insinuation in the article is BS, other browsers autofill just fine without keeping all passwords plaintext in memory.

    With this vulnerability, scam artists will be able to harvest all of a user’s passwords within a minute of connecting. Older folks fall for these types of scams all the time.

    By Microsoft logic, you may as well leave a safe unlocked since access to its contents would require that your home have been compromised already.

    source
    • OwOarchist@pawb.social ⁨1⁩ ⁨week⁩ ago

      Access to browser data as described in the reported scenario would require the device to already be compromised.

      Ah, so you’re perfectly find as long as your device is never compromised.

      Don’t worry about the missing fire extinguisher bro, that’s only important if the building is already on fire.

      source
  • Godort@lemmy.ca ⁨1⁩ ⁨week⁩ ago

    Safety and security are foundational to Microsoft Edge. Access to browser data as described in the reported scenario would require the device to already be compromised.

    Good thing that devices never get compromised. This would be a really big problem otherwise.

    source
  • giacomo@lemmy.dbzer0.com ⁨1⁩ ⁨week⁩ ago

    image using edge

    source
  • orbituary@lemmy.dbzer0.com ⁨1⁩ ⁨week⁩ ago

    Edge is Chromium. So, don’t expect different behavior from Chrome.

    source
    • Mihies@programming.dev ⁨1⁩ ⁨week⁩ ago

      Nope. Chromium is web engine it doesn’t handle passwords, that’s all on implementation of the app. That said, Chrome is much better protecting passwords.

      source
      • Mihies@programming.dev ⁨1⁩ ⁨week⁩ ago

        OTOH Chrome would happily install 4GB of AI data on your computer. I’d say about both.

        source
      • orbituary@lemmy.dbzer0.com ⁨6⁩ ⁨days⁩ ago

        Chrome is much better protecting passwords.

        Want to buy some waterfront property south of Miami?

        source
  • raspberriesareyummy@lemmy.world ⁨1⁩ ⁨week⁩ ago

    Well what do you expect if you allow Microslop to edge you?

    source