by Daniel Dawson (Developer) on July 26, 2010 · permalink

Please provide more details by email. Keep in mind this extension does not change the form autofill behavior. Some forms have autocomplete="no" set, which instructs the browser not to automatically fill in the form data. However, you can still use this extension to store the username and password, then when the page comes up, click twice on the username field and select your username; the password will be filled in at that point.

by Daniel Dawson (Developer) on May 25, 2010 · permalink

Not sure why I didn't think of it myself. I've just modified it appropriately. Thanks.

by Daniel Dawson (Developer) on May 17, 2010 · permalink

Yes, I know it's not a great icon. I'm not much of an artist, so that's all I could come up with. That said, anyone who would like to draw better icons (for both the add-on and the Saved Passwords button) is welcome to contribute. Your own, original work only, please. You'll get a credit, of course.

As for that skin, you know, you could turn that into a real add-on. With the right code in install.rdf and chrome.manifest, it should integrate with my add-on. I don't know much about theming for extensions, though, so I don't know if I could help any more than that.

I'd rather get better icons inside this extension, though.

One more thing: If all you want is the toolbar button from Saved Passwords Button, you don't need to hack anything. Just install both add-ons, then use the toolbar customizer to drag the key icon to a toolbar and leave the SP icon alone. Of course, the Tools menu is another story; maybe I'll add a config option to turn it off.

by Daniel Dawson (Developer) on March 29, 2010 · permalink

Generally, trust is a valid concern. However, you need to understand some things. First, AMO is not a free-for-all. Addons and their updates are reviewed by random AMO editors before being published, and they are supposed to look for things like spyware, and they demand access to source code in all cases; thus, some of the trust is on them in addition to the authors. If you believe otherwise, see what happens if you submit your own spyware,* but don't blame me if you get banned for violating the TOS. Obviously it's no guarantee, and users are free to install sandboxed versions at their own risk, but it does help a lot.

Second, this addon is free and open-source, with no hidden or obfuscated code, and I even allowed viewing the code online (link near the bottom); if you are capable of reading it, please do so and find out for yourself (it's less than 1,000 lines, not counting the skin and locales); if not, you might try to get someone else to look it over. I can't help, of course, for obvious reasons.

Third, there's actually no reason to single out this addon anyway, because *all* extensions have the security privileges to access users' passwords and send them off to wherever. Certainly it would be easier to commit identity theft through a more innocent-sounding extension than this. Think about that next time you install some tab-related extension. At least using AMO hosted addons affords some protection due to the review process.

So to answer your questions, AMO editors are stopping people stealing passwords, at least to an extent and for Public versions; and I probably deserve about the same trust as any other extension developer here, however much or little that might be.

* No, I'm not actually advising anyone to submit spyware or otherwise violate the TOS. It's merely rhetorical.