passwords not showing up ??? Topic is solved

Users and developers helping users with technical Pale Moon issues (Windows and other non-Linux O.S.). Please direct questions about the Linux version to the appropriate Linux board.

Moderators: trava90, satrow

Forum rules
This board is for technical/usage questions and troubleshooting for the Pale Moon browser only. The main focus here is on Pale Moon on Windows. Please direct your questions for Linux, Android and Mac to the dedicated boards.
Technical issues and questions not related to the Pale Moon browser should be posted in "technical chat"
Please keep off-topic and general discussion out of this board, thank you!
faithbuilders
Moon lover
Moon lover
Posts: 75
Joined: 2017-08-11, 22:11

passwords not showing up ???

Unread post by faithbuilders » 2018-01-16, 14:59

has anyone else have the problem of passwords not showing up after the newest PM upgrade? Now I have to keep entering my password every time. :x My list of passwords are still there, but there not showing up.

User avatar
New Tobin Paradigm
Off-Topic Sheriff
Off-Topic Sheriff
Posts: 6057
Joined: 2012-10-09, 19:37
Location: Sector 001

Re: passwords not showing up ???

Unread post by New Tobin Paradigm » 2018-01-16, 15:01

Have you read the release notes? They popup in a tab on every upgrade. Could have saved you the time to create a thread and ME to reply to it.
Last edited by New Tobin Paradigm on 2018-01-16, 15:02, edited 1 time in total.
Image
- Get out of bed. Resistance is futile. Wake up and assimilate the day. -
http://binaryoutcast.com/ | http://thereisonlyxul.org/ | Freenode #binaryoutcast

faithbuilders
Moon lover
Moon lover
Posts: 75
Joined: 2017-08-11, 22:11

Re: passwords not showing up ???

Unread post by faithbuilders » 2018-01-16, 15:17

Oh :oops: Thank you, I did read the release notes, but somehow missed that.

User avatar
New Tobin Paradigm
Off-Topic Sheriff
Off-Topic Sheriff
Posts: 6057
Joined: 2012-10-09, 19:37
Location: Sector 001

Re: passwords not showing up ???

Unread post by New Tobin Paradigm » 2018-01-16, 15:24

No problem.. WELL not much of one. Carry on! :)
Image
- Get out of bed. Resistance is futile. Wake up and assimilate the day. -
http://binaryoutcast.com/ | http://thereisonlyxul.org/ | Freenode #binaryoutcast

User avatar
Moonraker
Board Warrior
Board Warrior
Posts: 1109
Joined: 2015-09-30, 23:02
Location: Lincolnshire.UK.

Re: passwords not showing up ???

Unread post by Moonraker » 2018-01-16, 16:49

strange decision to change this function.
So usability and ease of use with passwords will be affected.
Xenial puppy linux 32-bit.
Pale moon 28.7.1

User avatar
New Tobin Paradigm
Off-Topic Sheriff
Off-Topic Sheriff
Posts: 6057
Joined: 2012-10-09, 19:37
Location: Sector 001

Re: passwords not showing up ???

Unread post by New Tobin Paradigm » 2018-01-16, 16:52

It was a security and privacy decision. You can re-enable it as an informed choice.. Least, we hope people will be informed.
Image
- Get out of bed. Resistance is futile. Wake up and assimilate the day. -
http://binaryoutcast.com/ | http://thereisonlyxul.org/ | Freenode #binaryoutcast

faithbuilders
Moon lover
Moon lover
Posts: 75
Joined: 2017-08-11, 22:11

Re: passwords not showing up ???

Unread post by faithbuilders » 2018-01-16, 18:04

It seems to only work if there is a user name and password. But if there is just a password, it does not popup, or show up... like; http://imgsrc.ru/main/passchk.php?ad=18 ... 7374954&t= the password 12345 is in my list, but its not showing up, or popping up.

User avatar
New Tobin Paradigm
Off-Topic Sheriff
Off-Topic Sheriff
Posts: 6057
Joined: 2012-10-09, 19:37
Location: Sector 001

Re: passwords not showing up ???

Unread post by New Tobin Paradigm » 2018-01-16, 18:53

Then flip it back on...
Image
- Get out of bed. Resistance is futile. Wake up and assimilate the day. -
http://binaryoutcast.com/ | http://thereisonlyxul.org/ | Freenode #binaryoutcast

postbuz
Moonbather
Moonbather
Posts: 50
Joined: 2014-10-16, 22:44
Location: On the border

Re: passwords not showing up ???

Unread post by postbuz » 2018-01-16, 22:55

I read the release notes. Still I totally missed the ramifications of the security changes. It's not easy to miss, when you are a mere user. So sometimes, it might be useful to point such a change out with a bit more emphasis ;)

tewitt1949
Hobby Astronomer
Hobby Astronomer
Posts: 27
Joined: 2015-08-01, 11:47
Location: mich

Re: passwords not showing up ???

Unread post by tewitt1949 » 2018-01-18, 04:28

I like PM but now that I have to type in all passwords it sucks big time. I wish I never upgraded. Is there a way to go back to before the update? Or make the passwords appear again?

CraigPD
Lunatic
Lunatic
Posts: 292
Joined: 2013-01-01, 19:03
Location: Mexico

Re: passwords not showing up ???

Unread post by CraigPD » 2018-01-18, 05:03

Is there a way to go back to before the update? Or make the passwords appear again?
You decide.
AutoFillLoginDetails
AutoFillLoginDetails

User avatar
Moonchild
Pale Moon guru
Pale Moon guru
Posts: 24637
Joined: 2011-08-28, 17:27
Location: 58°2'16"N 14°58'31"E
Contact:

Re: passwords not showing up ???

Unread post by Moonchild » 2018-01-18, 08:41

Moonraker wrote:strange decision to change this function.
So usability and ease of use with passwords will be affected.
There's nothing strange about it -- it's actually been a point of note for quite some time (see e.g. bug #408531 from 2007).
Automatically filling in credentials is a risk, because it's triggered by named form fields. if an XSS attack injects properly-named form fields, automatically-filled-in credentials can then be read and stolen. While there's been no known breach like this on major sites recently, it has been abused for tracking; so it's both a security AND privacy concern. See also this demo.

Usability isn't affected, only the convenience of hands-free use of passwords.
"If you want to build a better world for yourself, you have to be willing to build one for everybody." -- Coyote Osborne
Image

User avatar
Moonraker
Board Warrior
Board Warrior
Posts: 1109
Joined: 2015-09-30, 23:02
Location: Lincolnshire.UK.

Re: passwords not showing up ???

Unread post by Moonraker » 2018-01-18, 11:49

Thanks moonchild.
But i have noticed that double clicking the fields produces the username and password anyway so i do not see any security or privacy benefit.If we dont wish someone to see our passwords etc then they really should not be allowed access to the computer at all.

best wishes.
Xenial puppy linux 32-bit.
Pale moon 28.7.1

User avatar
New Tobin Paradigm
Off-Topic Sheriff
Off-Topic Sheriff
Posts: 6057
Joined: 2012-10-09, 19:37
Location: Sector 001

Re: passwords not showing up ???

Unread post by New Tobin Paradigm » 2018-01-18, 17:09

Yeah but with autofill off it is a user interaction on specific fields getting the info.. Of course js can still read it but what WILL NOT be in this case is a situation where there is a HIDDEN FORM being populated with creds without the user knowing about it on a page that has no visable form.

THIS is a good thing and an improvement in sec and privacy.

Unless, user flips the pref then that is a choice the user is making to sacrifice a bit of security and privacy for convenience.
Last edited by New Tobin Paradigm on 2018-01-18, 17:14, edited 2 times in total.
Image
- Get out of bed. Resistance is futile. Wake up and assimilate the day. -
http://binaryoutcast.com/ | http://thereisonlyxul.org/ | Freenode #binaryoutcast

User avatar
Moonchild
Pale Moon guru
Pale Moon guru
Posts: 24637
Joined: 2011-08-28, 17:27
Location: 58°2'16"N 14°58'31"E
Contact:

Re: passwords not showing up ???

Unread post by Moonchild » 2018-01-18, 17:33

Moonraker wrote:But i have noticed that double clicking the fields produces the username and password anyway so i do not see any security or privacy benefit.
It requires user interaction on a visible form field, i.e.: conscious user action to have these credentials filled in... how does that not provide a security benefit over having the manager automatically form-fill credentials in any field (including hidden ones) without user interaction, the moment a page is loaded?...
I'm not sure how I can explain this to you if you don't understand this basic difference. Please take a moment to think about the automatic-on-load versus user-must-fill scenarios and differences, and how third-party scripts could abuse it. I hope you get it; if not, maybe someone else can translate it into something more understandable than what I am able to.
"If you want to build a better world for yourself, you have to be willing to build one for everybody." -- Coyote Osborne
Image

tewitt1949
Hobby Astronomer
Hobby Astronomer
Posts: 27
Joined: 2015-08-01, 11:47
Location: mich

Re: passwords not showing up ???

Unread post by tewitt1949 » 2018-01-18, 17:48

craigd.. I don't have a page like you show. I have 8.1.

User avatar
Moonraker
Board Warrior
Board Warrior
Posts: 1109
Joined: 2015-09-30, 23:02
Location: Lincolnshire.UK.

Re: passwords not showing up ???

Unread post by Moonraker » 2018-01-18, 18:11

Moonchild wrote:
Moonraker wrote:But i have noticed that double clicking the fields produces the username and password anyway so i do not see any security or privacy benefit.
It requires user interaction on a visible form field, i.e.: conscious user action to have these credentials filled in... how does that not provide a security benefit over having the manager automatically form-fill credentials in any field (including hidden ones) without user interaction, the moment a page is loaded?...
I'm not sure how I can explain this to you if you don't understand this basic difference. Please take a moment to think about the automatic-on-load versus user-must-fill scenarios and differences, and how third-party scripts could abuse it. I hope you get it; if not, maybe someone else can translate it into something more understandable than what I am able to.
"user interaction!"
this is the key term is it not.
what difference does it make if a click is required or the details are autofilled.?
user interaction is still required for both methods.simply hiding the credentials is not secure in my opinion.If an uninvited guest is perusing your computer then whether the credentials is hidden or not is irrelevant.What i feel you should of done is to disable the double clicking function and require a fresh input from user,
my thoughts fwiw.
Xenial puppy linux 32-bit.
Pale moon 28.7.1

User avatar
New Tobin Paradigm
Off-Topic Sheriff
Off-Topic Sheriff
Posts: 6057
Joined: 2012-10-09, 19:37
Location: Sector 001

Re: passwords not showing up ???

Unread post by New Tobin Paradigm » 2018-01-18, 18:24

You simply don't get it or you are being intentionally being thick. Either way that is all we have to offer. If you cannot or will not try to understand.. We cannot help you.

With that the relevant discourse has come to an end in this thread.
Image
- Get out of bed. Resistance is futile. Wake up and assimilate the day. -
http://binaryoutcast.com/ | http://thereisonlyxul.org/ | Freenode #binaryoutcast

User avatar
Moonraker
Board Warrior
Board Warrior
Posts: 1109
Joined: 2015-09-30, 23:02
Location: Lincolnshire.UK.

Re: passwords not showing up ???

Unread post by Moonraker » 2018-01-18, 18:39

New Tobin Paradigm wrote:You simply don't get it or you are being intentionally being thick. Either way that is all we have to offer. If you cannot or will not try to understand.. We cannot help you.

With that the relevant discourse has come to an end in this thread.
no mr paradox,you do NOT get it.
heres a scenario for you,
my laptop gets stolen and they get to my desktop...well guess what all they need to do is open browser and double click sensitive fields and voila credentials are displayed and they are in.

comprende.?

nothing thick about it and if you cant see the error here then you are intentionally being evasive and plain pedantic.
i will not resort to insults as it will get nowhere.

i am talking about local access to uninvited people..do YOU not get it and this is why google will not implement it in chrome..
if you will not understand THIS then i for one cannot make the blind see..

cheers.
Xenial puppy linux 32-bit.
Pale moon 28.7.1

misomiso
Moongazer
Moongazer
Posts: 8
Joined: 2015-01-30, 09:01
Location: Singapore

Re: passwords not showing up ???

Unread post by misomiso » 2018-01-19, 05:20

CraigPD wrote:You decide.

AutoFillLoginDetails.png
Moonchild wrote:There's nothing strange about it -- it's actually been a point of note for quite some time (see e.g. bug #408531 from 2007).
Automatically filling in credentials is a risk, because it's triggered by named form fields. if an XSS attack injects properly-named form fields, automatically-filled-in credentials can then be read and stolen. While there's been no known breach like this on major sites recently, it has been abused for tracking; so it's both a security AND privacy concern. See also this demo.

Usability isn't affected, only the convenience of hands-free use of passwords.
Thank you :)

Locked