all 9 comments

sorted by: hot top controversial new old
[–] 32 points 4 months ago (1 child)

Access to browser data as described in the reported scenario would require the device to already be compromised.

Encrypting passwords / loading them into memory on an as-requested basis limits the scope of what gets compromised on a compromised device. The “performance” insinuation in the article is BS, other browsers autofill just fine without keeping all passwords plaintext in memory.

With this vulnerability, scam artists will be able to harvest all of a user’s passwords within a minute of connecting. Older folks fall for these types of scams all the time.

By Microsoft logic, you may as well leave a safe unlocked since access to its contents would require that your home have been compromised already.

  • source
  • hideshow 1 child comment
  • [–] 11 points 4 months ago* (last edited 4 months ago)

    Access to browser data as described in the reported scenario would require the device to already be compromised.

    Ah, so you're perfectly fine as long as your device is never compromised.

    Don't worry about the missing fire extinguisher bro, that's only important if the building is already on fire.

  • source
  • parent
  • [–] 22 points 4 months ago

    Safety and security are foundational to Microsoft Edge. Access to browser data as described in the reported scenario would require the device to already be compromised.

    Good thing that devices never get compromised. This would be a really big problem otherwise.

  • source
  • [–] 15 points 4 months ago*

    imagine using edge

  • source
  • [–] 4 points 4 months ago (3 children)

    Edge is Chromium. So, don't expect different behavior from Chrome.

  • source
  • hideshow 3 child comments
  • [–] 10 points 4 months ago* (2 children)

    Nope. Chromium is web engine, it doesn't handle passwords, that's all on implementation of the app. That said, Chrome is much better protecting passwords.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 3 points 4 months ago

    Well what do you expect if you allow Microslop to edge you?

  • source