PUBLIC MARKS from srcmax with tag "master password"

Master password is a must have and Google adopts see no evil, hear no evil policy regarding this issue. This blog is intended to bring awareness about Chrome lack of security regarding saved passwords.

While we agree that this situation would be terrible, we believe that a master password would not sufficiently protect you from danger. Someone with physical access to your computer could install a keylogger to steal your passwords or go to the sites where your passwords are stored and get them from the automatically filled-in password fields. A master password required to show saved passwords would not prevent these outcomes.

In many cases start up dialogs represent some form of failing, ranging from a failing of engineering (unable to find or implement a cleaner solution), a failing of design (unable to determine the best approach) or a failing of security (delegating a decision so that we can blame the victim). In all of these cases the dialog itself is simply the manifestation of a larger problem that we need to attack.

Asks for the master password at startup (fixes multiple password prompt)

That issue has recently been fixed on the current trunk builds (Minefield 3.6a1), but not in Firefox 3.5.x