StarDestroyer.Net BBS

Anyone knows how does firefox maintain the passwords to sites, and whether this is a security flaw?

Also, is it possible to retain these settings if I reinstall the programme, or back it up somehow?

Firefox stores it in an encrypted database, IIRC. This, along with your other personal data, is stored in your profiles directory.