Not logged in
Log in now
Create an account
Subscribe to LWN
Deadline scheduling: coming soon?
LWN.net Weekly Edition for November 27, 2013
ACPI for ARM?
LWN.net Weekly Edition for November 21, 2013
GNU virtual private Ethernet
Fedora's invisible passwords and visible squabbles
Posted May 9, 2013 4:53 UTC (Thu) by apoelstra (subscriber, #75205)
As a dvorak user, I often have times when I'm not sure what the keyboard mapping is -- such as when I'm setting up a VM from another machine, and the keyboard is double-mapped from qwerty to dvorak -- and it would be much more convenient (and more secure!) to hide the screen than to have to draw translation tables and write out passwords on paper.
So, it would have have been great for Fedora/anaconda to show some innovation on this point, and at least have a system-wide policy. I can dream...
Posted May 9, 2013 7:12 UTC (Thu) by bosyber (guest, #84963)
Not showing anything but having an option to verify what was typed is quite useful. If you remain in a save environment while that option is available, that is; of others can acccess the option, it is a potential problem, though not so much in that wifi router case where it is a shared secret. Remaining at the keyboard until you typed the password seems like a decent workaround in anycase.
About password length
Posted May 20, 2013 17:27 UTC (Mon) by man_ls (guest, #15091)
I have not heard either of password length being used to compromise the system, but that is not my thing so I am not completely sure about it. The state of the art seems to be: show keypresses as round balls ⚫, then when displaying a previous password show a predetermined length of round balls ⚫⚫⚫⚫⚫⚫⚫⚫ (not the actual password length).
Posted May 20, 2013 21:32 UTC (Mon) by rahulsundaram (subscriber, #21946)
Posted May 20, 2013 22:24 UTC (Mon) by man_ls (guest, #15091)
Posted May 20, 2013 22:59 UTC (Mon) by dlang (✭ supporter ✭, #313)
Posted May 21, 2013 1:00 UTC (Tue) by rahulsundaram (subscriber, #21946)
Posted May 9, 2013 18:53 UTC (Thu) by debacle (subscriber, #7114)
E.g. network manager applet dialogues do exactly that for WiFi, many web sites do this etc.
Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds