Re: Password security issues in GDM
On 05/06/2014 05:43 PM, Rodd Clarkson wrote:
I've filed bug number 1092274
(https://bugzilla.redhat.com/show_bug.cgi?id=1092274) about a week ago,
and so far there's been no response.
I have a lab full of fedora desktops and I have disabled the standard
login method so the users have to type their username (so that other
usernames are not exposed).
The problem is that GDM is asking for the username twice.
So what happens is that the user types their username, and the their
password (which is what you would expect next in a normal log in
process) but their password is typed in plain text on the screen for all
to see.
Known issue. There's a Fedora bug and an upstream Gnome bug filed for
it. I don't have the numbers off-hand.
And as someone else mentioned, this is the wrong list...