I have just downloaded a Polish program Passtool Password Reader (written by Rafał Jelitto), unpacked it from
.rar archive and run it. I have hit the bottom-left button (
Pokaż wszystko) and this small piece of software has immediately punched me with all my passwords ever used in Mozilla Firefox and Mozilla Thunderbird. A passwords, that up until now I considered safe, since stored in Password Manager.
My world has just collapsed (or I was that naive). It was that simple? I run that program on my office computer. During my summer break, when my boss has access to my computer (inner regulations), he can do the same and get all my passwords.
What am I missing? How can Mozilla product's creators claim, that their software is safe, if it only require to take four steps and thirty seconds to reveal all passwords stored in it?