Do you think this is a security risk and if not is it a bad UI decision?

[Matthias Clasen]

On Sat, 2013-05-04 at 00:26 -0500, Michael Cronenworth wrote:
> On 05/03/2013 03:08 PM, Reartes Guillermo wrote:
> > I think that the previous behaviour was better. (covering the password 
> > with bullets).
> >
> > At least the phones only show one character at a time, not the whole 
> > password.
> 
> GTK shows everything or nothing with visibility being a boolean setting. 
> GTK would need to gain the ability to do this most likely through a new 
> property for a GtkEntry widget.

GTK+ has been able to do for a very long time. See

https://developer.gnome.org/gtk3/3.8/GtkSettings.html#GtkSettings--gtk-entry-password-hint-timeout