[Bug 43692] RE: [Bug 43692] Re: welcome screen shows user password

[diego maniacco]

Yes, it is Ubuntu 5.10 32 bit (from official red CD), with standard
installation.

Yes, is within the Face Browser that lets you select a particular user to login in; on the rigth is the box where you insert the password.
The first time you click on a username (actually we have defined 3) in the left face screen-area, in this box the password is readable for just a while.

Afterthat, clicking on a user face/name shows you just the password-
length showing the same bullet numbers, not the text anymore.

diego maniacco

-----Original Message-----
From: bounces at canonical.com [mailto:bounces at canonical.com] On Behalf Of Simon Law
Sent: martedì 9 maggio 2006 00:08
To: Maniacco, Diego
Subject: [Bug 43692] Re: welcome screen shows user password


Hi Diego,

Which version of 5.10 are you using?  Ubuntu or Kubuntu?  That is, are
you using the GNOME version of the KDE version.

Are you talking about the login screen?  When you click on a username,
is this within the Face Browser that lets you select a particular user
to login as?

Thanks.

** Changed in: Ubuntu
Sourcepackagename: None => gdm

** This bug has been flagged as a security issue

** Summary changed:

- welcome screen shows user password
+ Login screen briefly reveals the user's password

** Description changed:

- This was noticed by my sun (Maximilian, 15yrs).
+ This was noticed by my son (Maximilian, 15yrs).
  
- ubuntu 5.10 is installed on Pentium-III/500 with 256Mb RAM, HD 80Gb,
+ Ubuntu 5.10 is installed on Pentium-III/500 with 256Mb RAM, HD 80Gb,
  Nvidia Riva C128ZX video card
  
- On Welcome screen, the first time user clicks on a username, password is for very short readable on password text-box.
- More cliks let read as many bullets as characters in the password (i.e.: password length 8 char -> 8 bullets are shown).
+ On the welcome screen, the first time user clicks on a username, the 
+ password is for briefly visible in the password text-box.
+ 
+ More clicks let read as many bullets as characters in the password
+ (i.e.: password length 8 char -> 8 bullets are shown).
  
  Not the best for security.
  
  diego maniacco, Bolzano, Italy
  diego.maniacco at provinz.bz.it

-- 
Login screen briefly reveals the user's password https://launchpad.net/bugs/43692

-- 
Login screen briefly reveals the user's password
https://launchpad.net/bugs/43692