nanog mailing list archives
Re: Google uploading your plain text passwords
From: César de Tassis Filho <ctassisf () gmail com>
Date: Fri, 11 Jun 2021 13:41:28 -0300
Google stores encrypted passwords. By default it uses your own Google Account password as part of the key to decrypt your other synced passwords. But you can change that and use a custom "sync passphrase". Once you're logged in your device can decrypt your passwords and compare them against databases of known compromised passwords. Google does not have access to your plain-text passwords in either case. More info: https://support.google.com/accounts/answer/6208650 https://security.googleblog.com/2020/10/new-password-protections-and-more-in.html Regards, César On Fri, Jun 11, 2021 at 1:05 PM William Herrin <bill () herrin us> wrote:
Howdy, My gmail account prompted me today to change a compromised password. It wasn't compromised; it was an offline system where I intentionally used a generic password. But in the process... It turns out that every password I allowed Chrome on Android to remember, it uploaded to Google. In plain text!! And it could prove it by displaying the plain text passwords for me on my laptop. And I can't turn the upload off! To the google folks on here: Are you INSANE!? Regards, Bill Herrin -- William Herrin bill () herrin us https://bill.herrin.us/
Current thread:
- Google uploading your plain text passwords William Herrin (Jun 11)
- Re: Google uploading your plain text passwords Josh Luthman (Jun 11)
- Re: Google uploading your plain text passwords William Herrin (Jun 11)
- Message not available
- Re: Google uploading your plain text passwords William Herrin (Jun 11)
- Re: Google uploading your plain text passwords Josh Luthman (Jun 11)
- Re: Google uploading your plain text passwords Alain Hebert (Jun 11)
- Re: Google uploading your plain text passwords William Herrin (Jun 11)
- Re: Google uploading your plain text passwords Josh Luthman (Jun 11)
- Re: Google uploading your plain text passwords Jan Schaumann via NANOG (Jun 11)
- Re: Google uploading your plain text passwords William Herrin (Jun 11)
- Re: Google uploading your plain text passwords Eric Kuhnke (Jun 11)
- Re: Google uploading your plain text passwords William Herrin (Jun 11)
- Re: Google uploading your plain text passwords César de Tassis Filho (Jun 11)
- Re: Google uploading your plain text passwords William Herrin (Jun 11)
- Re: Google uploading your plain text passwords John Levine (Jun 11)
- Re: Google uploading your plain text passwords Michael Thomas (Jun 11)
- Re: Google uploading your plain text passwords William Herrin (Jun 11)
- Re: Google uploading your plain text passwords Michael Thomas (Jun 11)
- Re: Google uploading your plain text passwords William Herrin (Jun 11)
- Re: Google uploading your plain text passwords Peter Beckman (Jun 11)
- Re: Google uploading your plain text passwords Matthew Petach (Jun 11)
- Re: Google uploading your plain text passwords César de Tassis Filho (Jun 11)
- Re: Google uploading your plain text passwords William Herrin (Jun 11)
- Re: Google uploading your plain text passwords Damian Menscher via NANOG (Jun 11)