Comment 3 for bug 1057437

Revision history for this message
Margarita Manterola (marga-9) wrote :

I've seen several users be affected by this (me included). It's particularly common for users to just expect to enter their password because that's what they normally do, while for some unknown reason the greeter is asking for the username instead (the enumerated vs general case above).

This is a security issue, not only because other people watching the screen might see the password being typed, but also because the failed username is logged to syslog in cleartext.

Please make it much more clearer when asking username vs password.