Sunday, December 10, 2006

Password Management Concerns with IE and Firefox (Part 1)

This is an interesting article about security mechanisms, risks, attacks, and defenses of the two most commonly used password management systems in Firefox and Internet Explorer (IE). The article specifically discuss about password storage mechanisms, attacks on password managers, false sense of security, usability, and mitigation and countermeasures. It explained the password storage mechanisms of both Internet Explorer 6 & 7 and Firefox 1.5 & 2.0, and then presented two JavaScript attacks that can be used against these browsers. I think you should read this article to get more undestanding about password management in IE and Firefox. You can get information here:
http://www.securityfocus.com/infocus/1882

No comments: