Comment 35 for bug 566818
Revision history for this message
| Martin Pitt (pitti) wrote Re: [Bug 566818] Re: Cryptsetup passphrase prompt during boot: every character typed repeats the prompt | #35 |
© 2004
Canonical Ltd.
•
Terms of use
•
Data privacy
•
Contact Launchpad Support
•
Blog
•
Careers
•
System status
•
35a32c5
(Get the code!)
ilf [2011-05-06 18:00 -0000]:
> There's a reason sudo and cryptsetup don't echo anything. It's called
> security.
plymouth, gnome-keyring, network-manager, etc. do echo stars for
providingbetter visual feedback for verifying that keystrokes work,
etc., which reduces a lot of confusion.
Out of interest, in which use case does it improve security to not
show the length of the password? If someone is standing behind you
while you type a password, he will learn more from watching your
fingers on the keyboard or just listening for the number of
keystrokes. With remote EM gauging you can construct the contents of
the display just as well as the number of keystrokes on the keyboard.
--
Martin Pitt | http://
Ubuntu Developer (www.ubuntu.com) | Debian Developer (www.debian.org)