2016年4月9日星期六

passwords.google.com: single point of failure for all my password security

I'm surprised to notice that Google has silently transferred all my password to Google and stored full password information in their server. It's a high security risk for me. You can see all the password using following URL after you login in to your Gmail account:

passwords.google.com

If you are using Chrome as the main web browser, that means most of your passwords are stored there. And they can be viewed as Plan text.

The problem is that usually you have different strategy to manage your passwords depends on the importance of the website, for example, for non-critical forum website, you may use very simple password, for email site, use a bit more complex password, for internet banking, you want to use most secured password. 

But as Google saved all your password in plain text, all the password strategy is downgrade one single password, google password. Anyone around the word, once they have got your google password or get a way to access your google account, for example from your lost phone or lost device, they can get all your other passwords. That will be a disaster.

And further more, for me the password should be my private information, it should never be stored anywhere except in my private note or storage. Usually as an online service provider, they should only store my password hash in their storage for verification purpose. As once password is stored, their employee can see it which is a a high risk. Nobody can guarantee every employee is a good guy in a large corporation.  

So to better protect yourself, I would suggest to disable smart locks for password. 


2010年9月10日星期五

[Android Application] CHM Reader

This is my first Android application posted. I spend quite a lot of spare time to implement it. Almost several months. I implemented the LZX de-compress algorithm and hhc parser from scratch. Tried to use open source one, but the performance is never good. So I decided to implement them from scratch. It's much faster compare to other similar application. The UI is very basic, I'm not a artist, so it's really difficult to design nice icons and buttons.

You can find the application here: https://play.google.com/store/apps/details?id=com.pdagate.chmreader


I tested with several CHM files. But I believe there will be bugs. Please feel free to send me feedback either through blog comments or email (jianwu@gmail.com). I'll try to fix your issue as soon as possible. It will be good if you can send me the device model and sample CHM file. So that I can easily identify the issue.

Thanks for you visiting.