Do you think this is a security risk and if not is it a bad UI decision?

[Adam Williamson]

On Mon, 2013-05-06 at 12:48 -0400, Matthias Clasen wrote:
> On Sat, 2013-05-04 at 00:26 -0500, Michael Cronenworth wrote:
> > On 05/03/2013 03:08 PM, Reartes Guillermo wrote:
> > > I think that the previous behaviour was better. (covering the password 
> > > with bullets).
> > >
> > > At least the phones only show one character at a time, not the whole 
> > > password.
> > 
> > GTK shows everything or nothing with visibility being a boolean setting. 
> > GTK would need to gain the ability to do this most likely through a new 
> > property for a GtkEntry widget.
> 
> GTK+ has been able to do for a very long time. See
> 
> https://developer.gnome.org/gtk3/3.8/GtkSettings.html#GtkSettings--gtk-entry-password-hint-timeout

Is there a standard GTK+ widget for the apparently-fairly-popular
compromise of 'hidden with a confirmation box by default, with a button
that shows the password and greys out the confirmation box'?
-- 
Adam Williamson
Fedora QA Community Monkey
IRC: adamw | Twitter: AdamW_Fedora | identi.ca: adamwfedora
http://www.happyassassin.net