If you actually _want_ someone's password and you have access to their account, there are many things you can do, all equally easy.
The more interesting argument here is the "crime of convenience" - where someone didn't want the passwords, but just saw them laying around in plain sight. But that isn't actually the case in Chrome: it's like four clicks. You have to actually be trying to find them.
Isn't a more likely crime of convenience that you hand your friend your computer, he types "gmail.com" to login to his mail, but he automatically logs in to your gmail, and then he realizes he can do pretty much anything on your computer as you now (including changing all passwords linked to your gmail account)?
Why are you more concerned about something he has to go digging through settings purposely to find, than something he is almost guaranteed to stumble across?
Comments
If you actually _want_ someone's password and you have access to their account, there are many things you can do, all equally easy.
The more interesting argument here is the "crime of convenience" - where someone didn't want the passwords, but just saw them laying around in plain sight. But that isn't actually the case in Chrome: it's like four clicks. You have to actually be trying to find them.
The point is that 4 clicks is a LOT more convenient than most people would expect.
Not to mention this doesn't seem to be an oversight by the Chrome team - it seems this is 'as designed'.
Isn't a more likely crime of convenience that you hand your friend your computer, he types "gmail.com" to login to his mail, but he automatically logs in to your gmail, and then he realizes he can do pretty much anything on your computer as you now (including changing all passwords linked to your gmail account)?
Why are you more concerned about something he has to go digging through settings purposely to find, than something he is almost guaranteed to stumble across?