We're calling on all EU-based Mozillians with iOS or iPadOS devices to help us monitor Apple’s new browser choice screens. Join the effort to hold Big Tech to account!

搜尋 Mozilla 技術支援網站

防止技術支援詐騙。我們絕對不會要求您撥打電話或發送簡訊,或是提供個人資訊。請用「回報濫用」功能回報可疑的行為。

了解更多

Firefox Security Concerns; Bookmarks, Passwords, Sync, Etc...

  • 2 回覆
  • 14 有這個問題
  • 4 次檢視
  • 最近回覆由 ChavezJ

more options

Can’t help being concerned, most likely it's out pure ignorance on my part, but here goes the question anyway.

Because Firefox is an open source software application, and worked on by a growing global community of open-source developers, some of whom are employed by the corporation itself, are Firefox features such as; Bookmarks, Passwords, Sync, etc… really private from community of open-source developers, some of whom are employed by the corporation itself?

Is it possible for an Add-on, plugins, etc… to have access to Firefox’s; Bookmarks, Passwords, Sync, etc… data?

Can’t help being concerned, most likely it's out pure ignorance on my part, but here goes the question anyway. Because Firefox is an open source software application, and worked on by a growing global community of open-source developers, some of whom are employed by the corporation itself, are Firefox features such as; Bookmarks, Passwords, Sync, etc… really private from community of open-source developers, some of whom are employed by the corporation itself? Is it possible for an Add-on, plugins, etc… to have access to Firefox’s; Bookmarks, Passwords, Sync, etc… data?

所有回覆 (2)

more options

Anyone can have access to bookmarks. Those are not protected and stored in an SQLite database file that can be accessed via an appropriate program or by simply copying the file places.sqlite to another profile folder.

You can protect the names and passwords that are stored in the Firefox Password Manager with a master password ()stored in key3.db) that will encrypt the names and passwords in the file signons.sqlite that stores them. Without that MP no access to the passwords is possible. Once you have entered the MP during a session it is however possible to get access to the names and passwords. Sync data is encrypted via the Sync key that is stored in the password manager and the name and password of the sync account is stored as well.


more options

Thanks, most enlightening.