Do you think this is a security risk and if not is it a bad UI decision?

[Matthias Clasen]

On Mon, 2013-05-06 at 11:01 -0700, Adam Williamson wrote:
> On Mon, 2013-05-06 at 12:48 -0400, Matthias Clasen wrote:
> > On Sat, 2013-05-04 at 00:26 -0500, Michael Cronenworth wrote:
> > > On 05/03/2013 03:08 PM, Reartes Guillermo wrote:
> > > > I think that the previous behaviour was better. (covering the password 
> > > > with bullets).
> > > >
> > > > At least the phones only show one character at a time, not the whole 
> > > > password.
> > > 
> > > GTK shows everything or nothing with visibility being a boolean setting. 
> > > GTK would need to gain the ability to do this most likely through a new 
> > > property for a GtkEntry widget.
> > 
> > GTK+ has been able to do for a very long time. See
> > 
> > https://developer.gnome.org/gtk3/3.8/GtkSettings.html#GtkSettings--gtk-entry-password-hint-timeout
> 
> Is there a standard GTK+ widget for the apparently-fairly-popular
> compromise of 'hidden with a confirmation box by default, with a button
> that shows the password and greys out the confirmation box'?

No, and I don't think it is a very likely candidate for a widget to add
to GTK. I could see adding a password entry widget that adds the peekabo
eye thingie.