Hacker News Reader

Anyone with access to your computer can see your website passwords stored in Google Chrome in CLEAR TEXT. Seriously this is redic. Yes, there is a responsibility for a user to adequately protect their computer, but this is just sets people up for identity theft and bunch of other bad stuff. My 60 year old parents use Chrome, your grandparents probably use Chrome. Help them out, at least have a master Chrome pw to protect viewing things in clear text...

View on HN

What do you think of Firefox having the same issue?

Was not aware. I don't use FF for browsing. If they have same issue its just as bad. If someone wants to hack your computer they can, I get it. But not adding at least some level of security (profile level pw required to reveal clear text) does not seem right.

Also understand Chrome needs to be able to get at the clear text at some point, and that you can get at it with JS. Adding a session/timeout based master/login password (like ssh keychain for example) to autofill pw, would be one idea to plug some of the holes.

Reply on news.ycombinator.com