3 ms·
Passwords are not a part of this... It's the session cookie, which is an entirely different matter. It's unique to the login process, so one compromised accou
by phamilton 16y ago
Passwords are not a part of this... It's the session cookie, which is an entirely different matter. It's unique to the login process, so one compromised account isn't able to lead to compromising other websites. It's also time sensitive (generally) and so that hijacked cookie will expire. If he were collecting all this information, he wouldn't be able to do much with it.
- chrisbroadfoot 16y agoJust because the user interface only exposes cookies, doesn't mean that passwords aren't captured and sent somewhere. It's very possible, given that the extension seemingly captures HTTP requests/responses. If passwords are sent or received in plaintext, then they can be captured.