Bug 70252 - EDITING: Auto-Correct - Word Completion is collecting passwords from internet browsing
Summary: EDITING: Auto-Correct - Word Completion is collecting passwords from internet...
Status: RESOLVED NOTOURBUG
Alias: None
Product: LibreOffice
Classification: Unclassified
Component: Writer (show other bugs)
Version:
(earliest affected)
4.1.1.2 release
Hardware: Other macOS (All)
: lowest enhancement
Assignee: Not Assigned
URL:
Whiteboard: BSA
Keywords:
Depends on:
Blocks:
 
Reported: 2013-10-07 19:44 UTC by dan
Modified: 2013-10-28 11:52 UTC (History)
1 user (show)

See Also:
Crash report or crash signature:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description dan 2013-10-07 19:44:17 UTC
I was looking at the word completion list and was surprised to see all my passwords in it.  I have disabled "Collect Words" for now, but would like to have the function with an option to not collect  typing outside LibreOffice and to not collect words with numbers.

Thanks!
Dan
              
Operating System: Mac OS X
Version: 4.1.1.2 release
Comment 1 Mike Kaganski 2013-10-08 08:55:04 UTC
Cannot reproduce with 4.1.2.3 under Win7x64. No MacOS here.

I think it highly improbable that LO would be able (and willing) to collect anything outside it. Especially passwords.

But if it were so, I would consider this a highest priority security issue. Grabbing passwords from other programs, storing them on a computer in plain text without user knowing that... wow!

That's why I raise the importance of this report from default to highest in hope that it will sooner be triaged by someone able to test it.
Comment 2 dan 2013-10-08 19:32:15 UTC
Okay this is embarrassing but I realize now that those passwords likely made it to the word completion list because I have a LO document with a list of passwords. 
Sorry for the false alarm!

The document is password protected though, and the word completion list is not.  
So I still have to disable the collection feature if I don't have the option of not saving words that contain numbers.
Comment 3 Mike Kaganski 2013-10-08 21:44:26 UTC
Maybe this could help you:

https://help.libreoffice.org/Writer/Fine-Tuning_the_Word_Completion_for_Text_Documents

> If the automatic spellcheck option is enabled, only the words that are
> recognized by the spellcheck are collected

Just turn spellcheck on, and passwords (that are not usual words) will not be collected. IMO, this actually does what your RFE needs.
Comment 4 dan 2013-10-08 22:31:50 UTC
thanks!
Comment 5 Jean-Baptiste Faure 2013-10-28 11:52:25 UTC
Due to comment #2, closing as NotOurBug. :-)

Best regards. JBF