[dba-Tech] FireFox SavePwd extentions

Rocky Smolin - Beach Access Software bchacc at san.rr.com
Mon Aug 9 08:33:22 CDT 2004


Well, yeah, YOU can do that.  I wouldn't know what I was looking for.  But
I'll take your word for it.

Thanks and regards,

Rocky

----- Original Message ----- 
From: "Stuart McLachlan" <stuart at lexacorp.com.pg>
To: "Discussion of Hardware and Software issues"
<dba-tech at databaseadvisors.com>
Sent: Sunday, August 08, 2004 4:40 PM
Subject: Re: [dba-Tech] FireFox SavePwd extentions


> On 8 Aug 2004 at 15:49, Rocky Smolin - Beach Access S wrote:
>
> > Are you certain that this extension is only saving your password on your
> > computer and not someone else's as well?  I'm getting real paranoid in
my
> > old age about spyware.
> >
> Certain. If you are in any doubt, save the "Always Save Password" to disk.
> It's actually called  "password.xpi".  Open it with Winzip or similar.
> Examine all of the files except password.jar with a text viewer.   Then
> open "password.jar" inside the archive with Winzip. Examine the included
> files in the same way.
>
> As you can see, there's no hidden payload anywhere. Apart from two jpegs,
> it's all plain XML or JavaScript in a couple of layers of zip wrapping.
>
>
>
>
>
>
>
> -- 
> Stuart
>
>
> _______________________________________________
> dba-Tech mailing list
> dba-Tech at databaseadvisors.com
> http://databaseadvisors.com/mailman/listinfo/dba-tech
> Website: http://www.databaseadvisors.com
>




More information about the dba-Tech mailing list