Developer Wladimir Palant (of Adblock Plus fame) has uncovered a big security weakness in the way Firefox secures browser passwords behind a master password. Firefox users who save browser passwords without a master key are, in theory, protected from attackers with access to their computer by encryption.
Read full news article on Naked Security