Public bug reported: I just installed new Nvidia drivers in a meeting room and, as I have Secure Boot enabled, was prompted for the password to enter on next reboot. Surprisingly, the password I entered (twice) was in clear text both times I entered it, which gives others around me an opportunity to read what this password is.
This isn't an issue with DKMS/Secure Boot per se, except that people are likely to use a password that they already use elsewhere (as it is something you need to remember) and shoulder surfers could potentially use that password to attack the user in other places. ProblemType: Bug DistroRelease: Ubuntu 19.10 Package: dkms 2.7.1-1ubuntu1 ProcVersionSignature: Ubuntu 5.0.0-20.21-generic 5.0.8 Uname: Linux 5.0.0-20-generic x86_64 ApportVersion: 2.20.11-0ubuntu3 Architecture: amd64 CurrentDesktop: i3 Date: Thu Jul 11 10:06:22 2019 InstallationDate: Installed on 2019-05-07 (64 days ago) InstallationMedia: Ubuntu 18.04.2 LTS "Bionic Beaver" - Release amd64 (20190210) PackageArchitecture: all SourcePackage: dkms UpgradeStatus: Upgraded to eoan on 2019-05-08 (63 days ago) ** Affects: dkms (Ubuntu) Importance: Undecided Status: New ** Tags: amd64 apport-bug eoan -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1836233 Title: Passwords in Secure Boot MOK prompt aren't obscured To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dkms/+bug/1836233/+subscriptions -- ubuntu-bugs mailing list firstname.lastname@example.org https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs