GNU bug report logs - #35540
Installer displays encrypted partition password entry in cleartext

Previous Next

Full log

Message #20 received at 35540 <at> debbugs.gnu.org (full text, mbox):

From: "pelzflorian (Florian Pelz)" <pelzflorian <at> pelzflorian.de>
To: Ludovic Courtès <ludo <at> gnu.org>
Cc: Julien Lepiller <julien <at> lepiller.eu>,
 Mathieu Othacehe <m.othacehe <at> gmail.com>, 35540 <at> debbugs.gnu.org
Subject: Re: bug#35540: Installer displays encrypted partition password entry
 in cleartext
Date: Sat, 4 May 2019 23:06:32 +0200

On Fri, May 03, 2019 at 03:50:52PM +0200, Ludovic Courtès wrote:
> That’s why I think that seeing what you actually type is useful.
> 

Seeing the password is useful, unless someone is shoulder surfing
while you install, which is possible.


> Other options include:
> 
>   1. Hiding the passphrase, but display right above it something like:
> 
>      Keyboard layout: <layout name>
> 
>   2. Adding a checkbox to toggle password visibility.
> 
> #1 is probably not great because it doesn’t help if you don’t know
> precisely the layout.
> 
> #2 would be nice; not sure how to do it, though.
> 
> Ludo’.
> 

#2 would please everybody, but I do not know what widgets Newt
provides for this.  Mathieu, would you know if changing the
visibility with e.g. a checkbox is doable?

Regards,
Florian

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.