4 ms·
Fascinating article. I'm especially concerned about the browser passwords being vulnerable - how serious is this, really? I would have hoped in 2020 that Mozill
by sho 7y ago
Fascinating article. I'm especially concerned about the browser passwords being vulnerable - how serious is this, really? I would have hoped in 2020 that Mozilla, et al would have something better than plaintext for passwords.
Also the article never really identified how the "patient zero" machine was infected in the first place. RDP brute force?
- arpa 7y agoMozilla does store the passwords encrypted, but unless you set a master password, it's more of an obfuscation, as the decryption key is stored in a key file next to logins file. If you set a master password that is sufficiently complex, you should be safe-ish, unless you are facing Mossad.