ilf [2011-05-06 18:00 -0000]:
> There's a reason sudo and cryptsetup don't echo anything. It's called
> security.

plymouth, gnome-keyring, network-manager, etc. do echo stars for
providingbetter visual feedback for verifying that keystrokes work,
etc., which reduces a lot of confusion.

Out of interest, in which use case does it improve security to not
show the length of the password? If someone is standing behind you
while you type a password, he will learn more from watching your
fingers on the keyboard or just listening for the number of
keystrokes. With remote EM gauging you can construct the contents of
the display just as well as the number of keystrokes on the keyboard.

-- 
Martin Pitt                        | http://www.piware.de
Ubuntu Developer (www.ubuntu.com)  | Debian Developer  (www.debian.org)

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/566818

Title:
  Cryptsetup passphrase prompt during boot: every character typed
  repeats the prompt

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to