1. 3

The cookies.sqlite file in one’s firefox profile is unencrypted and contains all current logins. About 4,500 of these files are publicly available on GitHub and findable via custom searches (“dorks”). The researcher who uncovered it speculates that it’s likely to be users committing their entire Linux $HOME and pushing to their public repos in order to be able to have the same env across different machines.