[Bug 43692] Re: [Bug 43692] Re: Login screen briefly reveals the user's password
status Rejected ** Changed in: gdm (Ubuntu) Status: Needs Info => Rejected -- Login screen briefly reveals the user's password https://launchpad.net/bugs/43692 -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 43692] Re: Login screen briefly reveals the user's password
cpbl and Wtas were wrigth; what appears is the username and not the password. Even strange, does not affect security. Thanks for helping, diego maniacco -- Login screen briefly reveals the user's password https://launchpad.net/bugs/43692 -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 43692] Re: [Bug 43692] Re: Login screen briefly reveals the user's password
diego: have you been able to test already? -- Login screen briefly reveals the user's password https://launchpad.net/bugs/43692 -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 43692] Re: Login screen briefly reveals the user's password
cpbl and Wtas may be wrigth; I will check if shown is password or username. Back on here before tomorrow for results. diego m. -- Login screen briefly reveals the user's password https://launchpad.net/bugs/43692 -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 43692] Re: Login screen briefly reveals the user's password
I think cpbl is right. I sometimes see usernames flicker for a while too. I couldnt imagine how GDM could know the passwords? Left in the history? Special exploit to decode from hashes using dictionary attacks?:D none of the above is feasible However, strange things happen sometimes. Diego, if you have some spare time, could you change your password to something easy to see, but completely different from your username, eg 9 or A*A*A*A*A. I have a second machine, Pentium II with Ubuntu Breezy (AFAIK this bug was reported for 5.10), and I cannot reproduce that. Test and report back the results. -- Login screen briefly reveals the user's password https://launchpad.net/bugs/43692 -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 43692] Re: Login screen briefly reveals the user's password
Are your passwords identical to your usernames? I've a Pentium4 with Dapper. Clicking on the name briefly displays the *username* before giving an empty password box. I can't reproduce anything like the viewing of number of bullets though. -- Login screen briefly reveals the user's password https://launchpad.net/bugs/43692 -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 43692] Re: Login screen briefly reveals the user's password
Could anybody with a slow box could try that on dapper? ** Changed in: gdm (Ubuntu) Assignee: (unassigned) => Ubuntu Desktop Bugs -- Login screen briefly reveals the user's password https://launchpad.net/bugs/43692 -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 43692] Re: Login screen briefly reveals the user's password
Hard to believe that, passwords are stored as SHA1 hashes, even if buggy gdm would want to display them, it couldnt ;) ** Changed in: gdm (Ubuntu) Status: Unconfirmed => Needs Info -- Login screen briefly reveals the user's password https://launchpad.net/bugs/43692 -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs