Bug#801757: Pinentry displays password while typing

2015-10-16 Thread Klaus Ethgen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 After finding the setting that is the real source of the problem, I tracked that file down. I took it very long ago from a existing debian system and tweaked the parameter about gtk-recent-files-enabled and one or the other. Unfortunately the change

Bug#801757: Pinentry displays password while typing

2015-10-16 Thread Axel Beckert
Hi, Daniel Kahn Gillmor wrote: > > In newest version, pinentry is displaying password when typing. (It is > > displaying the last letter but a observer can easily read the password.) > > i'm not seeing this behavior at all. I'm using pinentry-gtk2 0.9.6-2, > and libgtk2.0-0 2.24.28-1, just like

Bug#801757: Pinentry displays password while typing

2015-10-16 Thread Klaus Ethgen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi, Am Do den 15. Okt 2015 um 21:56 schrieb Daniel Kahn Gillmor: > On Wed 2015-10-14 05:14:11 -0400, Klaus Ethgen wrote: > > Package: pinentry-gtk2 > > Version: 0.9.6-2 > > > In newest version, pinentry is displaying password when typing. (It is >

Bug#801757: Pinentry displays password while typing

2015-10-16 Thread Klaus Ethgen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Am Do den 15. Okt 2015 um 21:56 schrieb Daniel Kahn Gillmor: > I'm unaware of such a change, please help me track it down! :) > > the main recent change is that pinentry now relies on the underlying > toolkit's password-entry widget. is it

Bug#801757: Pinentry displays password while typing

2015-10-15 Thread Daniel Kahn Gillmor
Control: tags 801757 + moreinfo unreproducible On Wed 2015-10-14 05:14:11 -0400, Klaus Ethgen wrote: > Package: pinentry-gtk2 > Version: 0.9.6-2 > In newest version, pinentry is displaying password when typing. (It is > displaying the last letter but a observer can easily read the password.)

Bug#801757: Pinentry displays password while typing

2015-10-14 Thread Klaus Ethgen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Package: pinentry-gtk2 Version: 0.9.6-2 Severity: grave In newest version, pinentry is displaying password when typing. (It is displaying the last letter but a observer can easily read the password.) That is a big security issue that renders