svramu / supergenpass-chrome-session Goto Github PK

What steps will reproduce the problem?
1.What steps will reproduce the problem?
1. Go to www.schwab.com
2. Type your password into the SGP popup


What is the expected output? What do you see instead?
The password to be filled into the box on the web page, but it doesn't get 
automatically filled in.

What is the feature/enhancement requested?
A per-site blacklist to disable SGP on certain sites, for those that I know 
don't work with the extension or when the extension just gets in the way 
(like my router).

What steps will reproduce the problem?
1. Go to http://my.freecycle.org
2. Fill in your password in S-C-S

What is the expected output? What do you see instead?
The password field should be filled in, but it's not.

What is the feature/enhancement requested?
A useful feature to have would be an optional session expiration - e.g. 
after N minutes of browser or SGP inactivity, clear the saved passwords from 
memory.

Why? (optional)
This could be useful if someone leaves their computer and forgets to clear 
or exit the browser.

It appears the "Show" button in version 2.0 outputs an incorrect password. 
I'm still not quite sure what it's outputting instead of the correct one, 
but I'm guessing either the domain or password used to generate the hash is 
incorrect.

What steps will reproduce the problem?
1. Go to a website, then click the SGP button, click on the domain, and enter a 
different domain.
2. Go to the SGP icon icon, enter your master password, and click "Show."

What is the expected output? What do you see instead?
The generated password is for the domain of the page you're actually on, not 
the custom domain you entered.

What is the feature/enhancement requested?

1. 
Maybe more than one master password can be created and stored for the 
session.
2. 
The password can be reset with one of the stored ones, for any site. 


Why? (optional)

http://akibjorklund.com/2009/supergenpass-is-not-that-secure
http://akibjorklund.com/files/2009/10/supergenpass-vulnerability-demo.html