Do you think this is a security risk and if not is it a bad UI decision?

Adam Williamson awilliam at redhat.com
Mon May 6 04:34:02 UTC 2013


On Mon, 2013-05-06 at 00:02 -0400, Orcan Ogetbil wrote:

> > Look, please, by all means, calmly discuss the merits of the decision.
> > Just don't bring into question the motivations of its introduction
> > unless you have a damn strong factual basis for doing so.

> I believe I do have a damn strong factual basis on everything I
> claimed. Sorry if I could not manage to convince.

Here is the proposal and discussion of the change:

https://lists.fedorahosted.org/pipermail/anaconda-patches/2013-April/003719.html

where you can easily read the motivation:

"It'd be nice to have passwords readable when editing them, and then
hidden when done editing."

Note: "it would be nice"! Not "it would contribute to our evil plans"!

https://lists.fedorahosted.org/pipermail/anaconda-patches/2013-April/003756.html

"Will and Mairin had some good links talking about the merits of doing
this and how hiding passwords doesn't even do all that much to help (a
determined person can always just watch your keyboard)."

"Why not use a checkbox?  Well, why use a widget if we don't have to?
Using a checkbox means now we have to work in another widget to the
design, introducing potential padding and layout problems.  It's another
string that needs to be translated.  It's another thing that needs a
mnemonic widget.  By doing the focus trick, we completely get rid of the
keyboard layout problem because you can see what you're typing as you're
typing it.  It may also even allow us to get rid of the confirmation
entries for the same reason."

Again, it's fine to disagree with this reasoning all you like. But the
thread clearly demonstrates people thinking about ways to improve the
installation experience. Unless you have clear evidence that this thread
was just some sort of clever smoke screen to conceal their REAL
intentions, I think you're out of line.
-- 
Adam Williamson
Fedora QA Community Monkey
IRC: adamw | Twitter: AdamW_Fedora | identi.ca: adamwfedora
http://www.happyassassin.net



More information about the devel mailing list