<story><title>Key for chromium&apos;s encrypted cookies store in Linux is “peanuts”</title><url>https://code.google.com/p/chromium/codesearch#chromium/src/components/os_crypt/os_crypt_posix.cc&amp;q=peanuts&amp;sq=package:chromium&amp;type=cs&amp;l=40</url></story><parent_chain></parent_chain><comment><author>teraflop</author><text>This is misleading. If you follow the links to the Chromium bug tracker, you&amp;#x27;ll note that Chrome integrates with the GNOME and KDE encrypted password managers when they&amp;#x27;re available. If they&amp;#x27;re not, it falls back to storing passwords itself with obfuscation, which is the best it can do. (On Windows and OS X, it uses CryptProtectData and the Keychain API, respectively.)&lt;p&gt;&lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;code.google.com&amp;#x2F;p&amp;#x2F;chromium&amp;#x2F;wiki&amp;#x2F;LinuxPasswordStorage&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;code.google.com&amp;#x2F;p&amp;#x2F;chromium&amp;#x2F;wiki&amp;#x2F;LinuxPasswordStorage&lt;/a&gt;</text></comment>
<story><title>Key for chromium&apos;s encrypted cookies store in Linux is “peanuts”</title><url>https://code.google.com/p/chromium/codesearch#chromium/src/components/os_crypt/os_crypt_posix.cc&amp;q=peanuts&amp;sq=package:chromium&amp;type=cs&amp;l=40</url></story><parent_chain></parent_chain><comment><author>userbinator</author><text>I guess a lot of others are also wondering, &amp;quot;What&amp;#x27;s the point?&amp;quot;&lt;p&gt;If an attacker can read the file the cookies are stored in, you have already lost.&lt;p&gt;It even mentions &amp;quot;obfuscation&amp;quot; - which might be a &lt;i&gt;slight&lt;/i&gt; obstacle if this was closed-source - but Chromium is open-source.</text></comment>