<div dir="ltr"><div><div>I think that the previous behaviour was better. (covering the password with bullets).<br><br></div>At least the phones only show one character at a time, not the whole password.<br><br></div>Cheers.<br>
</div><div class="gmail_extra"><br><br><div class="gmail_quote">On Fri, May 3, 2013 at 5:04 PM, Dan Mashal <span dir="ltr"><<a href="mailto:dan.mashal@gmail.com" target="_blank">dan.mashal@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi,<br>
<br>
In the latest Fedora 19 Beta TC2 install after I got through the<br>
initial steps of the install I started to setup my root password.<br>
<br>
To my surprise my password was shown in plain text instead of bullets.<br>
<br>
I believe that this is a major security risk and that this is a new UI<br>
change going forward and this is not a bug.<br>
<br>
Do you think this is a good idea?<br>
<br>
What if you are installing and someone is looking over your shoulder<br>
and you don't know about this new "UI improvement"?<br>
<br>
Someone would see a password that you may or may not often use whether<br>
it's secure or not.<br>
<br>
Even if someone watched you type the password or recorded it with a<br>
camera, that would be harder to decrypt than just showing it in plain<br>
text while you type it in to anaconda.<br>
<br>
In addition, it was stated that this is becoming a "popular" UI<br>
enhancement but there was no documentation provided as to where this<br>
is popular. In my experience you would click on an icon next to the<br>
dialog box if you wanted to see the password. This is what is becoming<br>
popular. Not showing it as plain text while you type.<br>
<br>
Thoughts?<br>
<span class="HOEnZb"><font color="#888888"><br>
Dan<br>
--<br>
devel mailing list<br>
<a href="mailto:devel@lists.fedoraproject.org">devel@lists.fedoraproject.org</a><br>
<a href="https://admin.fedoraproject.org/mailman/listinfo/devel" target="_blank">https://admin.fedoraproject.org/mailman/listinfo/devel</a></font></span></blockquote></div><br></div>