This morning I received a blank text message on my iPhone! Not sure what was going on but the message showed up blank and without a number. The picture below shows what I’m talking about. Strangely enough, notice the date for the message. It’s not 2012 and it’s not 9:11 PM! I’m assuming it was my phone freaking out and not the cell network but it was definitely a weird occurrence!

So how would you hack these passwords? Well, its not really true hacking but simple copying and pasting of a couple files and you can access anybodies saved Firefox passwords. Wait, WHAT? Firefox creates a profile directory on your computer that stores the various information about your Firefox setup like bookmarks, plugins and history. There are two files that are used to store the passwords.

1. key3.db – This file stores a copy of the encryption key used to encrypt the saved passwords.
2. signons.txt, signons2.txt, or signons3.txt – These files store the saved passwords and as you can tell they are plain text files containing the encrypted passwords and logons. The signons.txt file is from early versions of Firefox 2 and signons2.txt is used in Firefox version 2.0.0.2 and later. You should find the signons3.txt file if you are using Firefox 3 or later.

Ok, so where are these files found? These files are stored in the profile directory which can be accessed by browsing to the profile folder based on which operating system you are using:

• Windows Vista and XP:    %APPDATA%\Mozilla\Firefox\Profiles\
• Mac OS:    ~/Library/Application Support/Firefox/Profiles/

You can visit this Mozilla support page if you need help finding your profile directory.

Now that you have found the profile directory that contains the saved passwords, these two files could be copied to another computer for viewing and accessing the passwords. Lets say that someone wants to gain access to your passwords. I am in no way condoning the stealing of someone’s passwords but I’m just telling you so that you can be aware! If they gain access to your computer for even a few seconds, a skilled, mischievous person could copy the two password files to a thumb drive or even access your computer over a wireless network if you are not running some type of firewall. By copying these two files they could then view your passwords using the method I am about to explain.

Lets say that you have gained access to these two files in some sort of a legitimate manner and you are not trying to steal someone’s passwords. For example, you could just want to move your passwords from one computer which could be done through this method:

1. Create a new profile using the Firefox Profile Manager so that you don’t mess up any of your settings. To open the profile manager, type “firefox.exe -profilemanager” into the “Run” dialog on your Start Menu on Windows or type “/Applications/Firefox.app/Contents/MacOS/firefox -profilemanager” into Terminal on your Mac computer. If you need help opening the profile manager, visit this Mozilla support page.
   
2. Once you have the profile manager opened, select “Create Profile…” and give the profile a meaningful name.
   
3. Then choose “Exit”.
   
4. Open up the Firefox profile directory as mentioned above and look for the profile with the same name after the period as the one you just created in the Profile Manager. It should be of the form “xxxxxxxx.profilenamehere” where the “X”s are random letters and numbers.
5. Copy the two password files, key3.db and signons3.txt that you obtained into this profile directory. If it asks if you want to overwrite the files, say “Yes” so that the empty files are overwritten by the ones that actually contain the passwords. This is why we created a new profile. Otherwise, you would be writing over the saved passwords stored in your Firefox profile.
6. Open up the Firefox Profile Manager again. This time, select the profile that you created and select “Start Firefox”. You should now be in Firefox and will be able to access the saved passwords. To view the passwords, go to “Tools -> Options -> Security -> Saved Passwords …”  and then choose “Show Passwords” at the bottom right of the passwords window.
7. Voila! You should now be able to see all of the passwords stored in the files that were copied from a different computer.

Firefox Profile Manager

Well, now, thats fun! Some dubious person who gains access to your computer for more than a couple seconds could potentially steal all of your passwords. This means that a “back-stabbing” friend, tech support guy from some company like Best Buy or the tech support guys at your workplace could steal your passwords without truly hacking anything. Scary? Yes! People are not aware of how exposed they are and they rarely take the steps to protect themselves.

So how do you avoid someone from easily stealing your passwords and accessing your accounts? The makers of Firefox are not stupid and have built in a feature that allows you to set a Master Password. By default, this Master Password is not set and most people never set a Master Password. (This is exactly what it sounds like by the way…a password for your passwords) You can enable the Master Password by going to “Tools -> Options -> Security” and selecting “Use a master password.”

By setting the Master Password, a mischievous person cannot gain access to your passwords. Even if they were to copy your passwords to a different computer, they would have to know your master password in order to select “Show Passwords” as mentioned in Step 6 of the directions above. Also, when they visit a website that a password has been saved for, they would be prompted to enter the Master Password. This means that you will also have to enter the Master Password the first time a saved password is requested by Firefox after opening your browser. Don’t think of this a nuisance but rather an extra layer of security protecting your online identity. Just imagine if some menacing person gained access to your email, Facebook, bank accounts and other important sites?

Ok, I think the point has been made. Set a Master Password in Firefox so that someone cannot easily steal your passwords and access your various online accounts from the privacy of their comptuer.

Now that I am back home and have a full desk to myself, I was able to redo my computer set up. I bought a second Acer 22″ monitor at the start of the year to use as a TV and later took it out of use when my room mate got a new 26″ LCD TV for us to use. Now that I have a new graphics card and two monitors I finally have my ideal dual monitor set up! Here is a picture:

I’m pretty excited that I finally am able to use this as my set up! It consists of 2 Acer 22″ LCD screens, my “Hackintosh” desktop running Mac OS X Leopard and a Logitech wireless keyboard and mouse. I feel more productive already and I definitely enjoy being able to watch a movie or TV show on one screen while writing an e-mail or surfing the web on the other! I know that this set up will also help a lot when I am trading on the Forex market but I’ll write more about that sometime later. Overall, feels great to be home and feels good knowing that I have nearly four months of summer ahead of me!

Things have been rather hectic lately with the end of the school year finally here. I have one more exam tomorrow morning and then a Physics final on Saturday and then I’ll be done with freshman year! Oh, the joys! I’m definitely excited for the summer and glad that I can finally relax and not worry about studying and going to class until the end of August!

In other news, I have become a rather crazed Apple fanatic. In the past two months I have bought an iPhone, started using a Leopard desktop full time and bought Apple stock! I would definitely say that I fully enjoy using Apple’s wonderful products. The iPhone has been utterly amazing! I went from a piece of junk Motorola v360 flip phone to a “compact computer” for a phone. I remember buying the Motorola v360 about two years ago and being pretty psyched that it had a Micro SD slot that would let me store about a gig of MP3s on my phone. The iphone I bought has 8 GBs of space and can do a million more things compared to the v360.

I have also switched over to a Leopard desktop for full time use. I still use my laptop for CAD work and for some Windows based programming but am fully content using Mac full time now. I personally find that it helps me to work better. I actually enjoy having to do homework at times just so that I have a good reason to use the Mac! The entire look and feel of the operating system is so refreshing and fun to use. Everything is “smooth” looking and makes you feel like you are engulfed in an experience as opposed to staring at a boring screen as you work on something.

To top off my Apple craze I also bought some Apple stock! This was certainly a milestone for me since it was my first stock purchase ever! Considering how much I enjoy making quick money with a minimal amount of work, I don’t know why I didn’t invest in the stock market earlier. Granted, its rarely easy to make money on the stock market without serious research, making any profit kicks the crap out of the 0.20% interest Wachovia would be paying me to have my money in a savings account. I’ll definitely see if my investment was a wise one tomorrow afternoon once able announces their earnings! It’s either going to sky rocket or plummet and I’m obviously hoping for the first one!

Well, that’s all for now. I’ll leave you with a link to my development website:

http://www.stokedev.com

I’ve developed a couple small web applications for the iPhone and will be working on more soon now that my finals are coming to an end. Here are links to my applications on Apple’s website if you are interested:

Money Shuffle: a simple currency convertor for the iPhone:

http://www.apple.com/webapps/calculate/moneyshuffle.html

iDeals: a deal of the day tracker for the iPhone:

http://www.apple.com/webapps/utilities/ideals.html