Bug#899984: sddm: Password automatically shown in clear at every user login
Hi, I got very surprised by this feature too, if you are using the "breeze" or "debian breeze" theme the little "eye" icon is hidden with the default theme. Try clicking at the very end (right) of the password field and you should be able to toggle password visibility. Now I am trying to reproduce this very hard, but I am convinced that some interaction with the keyboard (maybe a key-combo) also triggers the password visibility toggle, because I never touch my trackball at this point and was caught by this a few times before. It happens regardless of the number of monitors connected for me, but with multiple screens the user is sometimes forced to click in the desired password field to make it active, thus increasing the risk of hitting the hidden "eye" icon. Very bad during a presentation... Cheers.
Bug#899984: sddm: Password automatically shown in clear at every user login
Control: tag -1 + unreproducible ¡Hola r.ductor! El 2018-05-24 a las 11:42 +0200, r.ductor escribió: Package: sddm Version: 0.17.0-1 Severity: normal The greeter ui is part of the theme, the themes shipped with sddm don't have a "show password" button (afaik), the sddm-theme-breeze has this feature, provided by plasma-frameworks' plasmacomponentstandard TextField widget, which seems to work fine. In any case, this is part of the theme, not part of sddm itself. Which theme are you using? At every login autentifications passwords are automatically shown in clear when entered. None of the themes I've seen show the passwords in plain text by default, and only breeze has the option to show it by pressing the "eye" button. Maybe this is not a bug and you think this is a very useful feature, and maybe I've inadvertently clicked on the eye icon that I see on other machines but not on this one. If this is the case there should be a simple way out from this unsafe behavior, so take this as a wish of better documentation (I find no mention of this in the man pages) or better hide/unhide icons. I'm not sure what you are trying to say here. Is your bug report about the existance of the reveal password option (the "eye" icon)? As mentioned, this is part of the theme, if you don't like it, please use a different one. Happy hacking, -- "The cheapest, fastest and most reliable components of a computer system are those that aren't there." -- Gordon Bell Saludos /\/\ /\ >< `/ signature.asc Description: PGP signature
Bug#899984: sddm: Password automatically shown in clear at every user login
Package: sddm Version: 0.17.0-1 Severity: normal Dear Maintainer, At every login autentifications passwords are automatically shown in clear when entered. Maybe this is not a bug and you think this is a very useful feature, and maybe I've inadvertently clicked on the eye icon that I see on other machines but not on this one. If this is the case there should be a simple way out from this unsafe behavior, so take this as a wish of better documentation (I find no mention of this in the man pages) or better hide/unhide icons. Thanks, r. -- System Information: Debian Release: buster/sid APT prefers testing APT policy: (900, 'testing') Architecture: amd64 (x86_64) Kernel: Linux 4.16.0-1-amd64 (SMP w/8 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages sddm depends on: ii adduser 3.117 ii debconf [debconf-2.0] 1.5.66 ii libc6 2.27-3 ii libgcc1 1:8-20180425-1 ii libpam0g 1.1.8-3.7 ii libqt5core5a 5.10.1+dfsg-5 ii libqt5dbus5 5.10.1+dfsg-5 ii libqt5gui55.10.1+dfsg-5 ii libqt5network55.10.1+dfsg-5 ii libqt5qml55.10.1-4 ii libqt5quick5 5.10.1-4 ii libstdc++68-20180425-1 ii libsystemd0 238-4 ii libxcb-xkb1 1.13-1 ii libxcb1 1.13-1 ii qml-module-qtquick2 5.10.1-4 ii x11-common1:7.7+19 ii xserver-xephyr [xserver] 2:1.19.6-1 ii xserver-xorg [xserver]1:7.7+19 Versions of packages sddm recommends: ii libpam-systemd 238-4 ii sddm-theme-breeze [sddm-theme] 4:5.12.4-1 Versions of packages sddm suggests: ii libpam-kwallet5 5.12.1-1 pn qtvirtualkeyboard-plugin -- debconf information: * shared/default-x-display-manager: sddm sddm/daemon_name: /usr/bin/sddm
