lepricaun Posted October 16, 2004 Report Share Posted October 16, 2004 hi all, i was doing some investigating on my drive since i am planning to write a program which reads the saved passwords and usernames for Firefox (just like iekey.exe from passware does for Internet Explorer). but what i have found out is that when you go to "tools","options","privacy" and hit the "clear all" button, nothing is removed! the files which contain the stored history and the "encrypted passwords" still have the same content AFTER pressing that button. you'll have to clear all the options one by one in order to clean your history.also all interesting data is saved in one and the same folder:C:\Documents and Settings\<your username>\Application Data\Mozilla\Firefox\Profiles\default.sfpin this folder there are several interesting files, but one of them is the most interesting: signons.txt. this is the txt file where the url history AND the saved passwords and usernames are stored (although encrypted). i think the encryption is some kind of base64 form since the encryptions looks a lot like it (but can't be decyphered using base64). also when you have cleared all data, one by one via the GUI from firefox, this file still contains semi personal data, it is some kind of url history which goes way back in time.e.a.:the signons.txt file on my computer contains the following:#2chttp://www.antionline.comhttp://www.guidancesoftware.comhttp://admin.bbknk.nlhttp://ldbreg.lycos.comhttp://www.modifiedmemphis.comhttp://www.governmentsecurity.orghttp://www.programmersheaven.comhttp://www.gulftech.orghttp://www.hackquest.dehttps://piauth.prodigy.nethttp://www.hackerslab.orghttp://cboard.cprogramming.comhttp://www.securstar.comhttp://www.cc-cards.nethttp://sbcglobal.prodigy.nethttp://www.linuxforums.orghttp://www.windowsforum.orghttp://www.linuxquestions.orghttp://www.actorpoint.comhttp://217.30.18.106:8080http://www.codeguru.comhttp://members.driverguide.comhttp://www.loginmatrix.comhttp://www.ps3portal.comhttp://www.security-forums.comhttp://neworder.box.skhttp://www.asisonline.orghttp://gradespeed.hardin.isd.esc4.net:81http://www.programmingforums.org.this file contains entries of sites i haven't visited in about 2 months (and i clear my history etc about 2 times per week)!i find this a really BAD thing that anyone who can read files on your computer can find out these things so easily even if you think you are safe by clearing your cache, history, passwords etc very often, the file still contains personal data!so i think i will go for another browser (again), and hope to find one which DOES delete everything if you say so! Quote Link to comment Share on other sites More sharing options...
Boris Posted October 16, 2004 Report Share Posted October 16, 2004 Mine (running 0.9) is in -C:\Documents and Settings\\Application Data\Mozilla\Firefox\Profiles\default.tx3 - but "clear all" does then clear my cache folder ! - incl. signons.txt !I however also have a cache(2) folder with some stuff for 2 days back in September showing. Quote Link to comment Share on other sites More sharing options...
lepricaun Posted October 17, 2004 Author Report Share Posted October 17, 2004 well, 0.9.3 doesn't but they have solved it in the latest version though, except they still use the same type of encryption. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.