Firefox Security Concerns; Bookmarks, Passwords, Sync, Etc...
Can’t help being concerned, most likely it's out pure ignorance on my part, but here goes the question anyway.
Because Firefox is an open source software application, and worked on by a growing global community of open-source developers, some of whom are employed by the corporation itself, are Firefox features such as; Bookmarks, Passwords, Sync, etc… really private from community of open-source developers, some of whom are employed by the corporation itself?
Is it possible for an Add-on, plugins, etc… to have access to Firefox’s; Bookmarks, Passwords, Sync, etc… data?
All Replies (2)
Anyone can have access to bookmarks. Those are not protected and stored in an SQLite database file that can be accessed via an appropriate program or by simply copying the file places.sqlite to another profile folder.
You can protect the names and passwords that are stored in the Firefox Password Manager with a master password ()stored in key3.db) that will encrypt the names and passwords in the file signons.sqlite that stores them. Without that MP no access to the passwords is possible. Once you have entered the MP during a session it is however possible to get access to the names and passwords. Sync data is encrypted via the Sync key that is stored in the password manager and the name and password of the sync account is stored as well.
Thanks, most enlightening.