on todays image (krillin rtm-proposed r21)
13:57 < asac> 1. kill terminal 13:57 < asac> 2. open terminal and enter pin 13:57 < asac> 3. click in terminal pastes my pin :)
obviously not good for security. Think might be bad.
Seems its not getting to dictionary at least:
13:58 < asac> 4. /me uses backspace to delete 13:58 < asac> 5. type ls 13:58 < asac> 6. type first digit of pin -> does not suggest my pin
we should check other credential prompts too: pin lock screen, sim pin etc.
Haven't tried, but I assume UITK password fields and browser dont have that, but might be worth checking.
Thanks!
on todays image (krillin rtm-proposed r21)
13:57 < asac> 1. kill terminal
13:57 < asac> 2. open terminal and enter pin
13:57 < asac> 3. click in terminal pastes my pin :)
obviously not good for security. Think might be bad.
Seems its not getting to dictionary at least:
13:58 < asac> 4. /me uses backspace to delete
13:58 < asac> 5. type ls
13:58 < asac> 6. type first digit of pin -> does not suggest my pin
we should check other credential prompts too: pin lock screen, sim pin etc.
Haven't tried, but I assume UITK password fields and browser dont have that, but might be worth checking.
Thanks!