Raider Security
raidersec.blogspot.com · Personal blog · on HN since 2012
Raider Security is a security blog with tutorials on password storage, OSINT tools, wireless attacks, and data-leak monitoring.
What HN saysHN commenters repeatedly link its article on how browsers store passwords, using it to argue for a Firefox master password or not storing passwords in browsers.
18HN people shared it
8linked it in comments
14stories submitted
182story points
8 years agolast shared
2012people per year2026
Most-shared posts
- 1How Browsers Store Your Passwords (and Why You Shouldn't Let Them)5 people · 2 points · first shared 2013 · discussion on HN
- 2How Browsers Store Your Passwords (and Why You Shouldn't Let Them)4 people · 149 points · first shared 2013 · 81 comments on HN
- 3Automatically Enumerating Google API Keys from Github Search3 people · 7 points · first shared 2013 · discussion on HN
- 4How Browsers Store Your Passwords (and Why You Shouldn't Let Them)1 people · 9 points · first shared 2015 · 2 comments on HN
- 5How Browsers Store Your Passwords (and Why You Shouldn't Let Them)1 people · 8 points · first shared 2013 · discussion on HN
- 6Automated Open Source Intelligence (OSINT) Using APIs1 people · 2 points · first shared 2013 · discussion on HN
- 7Show HN:Dumpmon- A Twitter-bot Monitoring for Account Dumps and Other Data Leaks1 people · 2 points · first shared 2013 · discussion on HN
- 8Mapping Tor Relays and Exit Nodes1 people · 1 points · first shared 2013 · discussion on HN
- 9Mapping Tor Relays and Exit Nodes1 people · 1 points · first shared 2013 · discussion on HN
- 10Wireless "Deauth" Attack using Aireplay-ng, Python, and Scapy1 people · 1 points · first shared 2013 · discussion on HN
- 11How browsers store your passwords and1 people · first shared 2013
- 12How browsers store your passwords and1 people · first shared 2013
- 13Csaw ctf quals 2012 recon 1 3 writeup1 people · first shared 2012
What HN people wrote when they linked it
kuroguro · 2018-11-04
Chrome stores them in sqlite as well. AFAIK on windows if running as the same user you just need to call CryptUnprotectData. No password needed.
http://raidersec.blogspot.com/2013/06/how-browsers-store-your-password…
awip · 2014-04-10
This is why: http://raidersec.blogspot.com/2013/06/how-browsers-store-your-password…
TL;DR Firefox with a strong master password was considered safe at the time of that article's writing (June 2013). That + Firefox Sync is what I use - I would also be interested in anything more up to date on why this is or isn't a good idea.
fernandotakai · 2013-11-05
This is a good (albeit old-ish) article on extracting passwords of firefox, chrome and IE http://raidersec.blogspot.com.br/2013/06/how-browsers-store-your-passw…
kefs · 2013-08-25
Relevant reading:
http://raidersec.blogspot.in/2013/06/how-browsers-store-your-passwords…
Also, if you're on FF, do yourself a favour and turn on a master password before it's too late (Tools > Settings > Security).
rlwolfcastle · 2013-08-24
Your comment is all over the shop.
I don't understand the big deal here. You shouldn't be storing your passwords at all in a browser.
http://raidersec.blogspot.com.au/2013/06/how-browsers-store-your-passw…
jwcrux · 2013-08-07
I've already done analysis of most of the major browsers. It even hit the HN front page a couple months ago:
http://raidersec.blogspot.com/2013/06/how-browsers-store-your-password…
Elusive · 2013-08-06
Apparently, Chrome does encrypt passwords, using the Windows cryptography APIs: http://raidersec.blogspot.in/2013/06/how-browsers-store-your-passwords…
It's not secure against any attacks running under the user, though.
dguido · 2012-10-01
DEFCON CTF teams with points: 303 (http://ddtek.biz/qualsDC20scoreboard.html)
CSAW CTF teams with points: 639
STRIPE CTF competitors: ~7,000
CSAW CTF competitors: ~9,100
Writeups are being posted in reddit.com/r/netsec:
http://raidersec.blogspot.com/2012/09/csaw-ctf-quals-2012-recon-1-3-wr…
http://blog.lse.epita.fr/articles/31-csaw-ctf-2012-exploitation-200300…