kiezel
Crew Member
Posts: 143
Likes: 219
|
Post by kiezel on May 15, 2021 17:30:43 GMT
I've just posted a short tutorial for getting asterisks feedback when you type your password in the terminal:
Might be nice to add this feature to the next Bodhi, because it's a bit more user-friendly like that. What do you think?
|
|
|
|
Post by Hippytaff on May 15, 2021 17:49:19 GMT
I have it by default, it was that way in beta and in the RC. Hadn’t noticed the official 6.0.0 version didn’t have password stars in the terminal.
|
|
|
|
Post by ylee on May 15, 2021 19:02:01 GMT
I put in the unofficial releases then I took it out of the final release. After a few complaints and confusion about removing it. I personally like it and have known you could do that seemingly forever. As to it being in future releases, I have no strong opinions one way or the other. You could see it as a minor security flaw as someone could see your password length. But if they are that close it would seem to me they also you typing it, lmao. My password is actually 11 characters long and a computer-generated random string and I change it every now and then. So knowing it is 11 characters long is not much help. Johny the Ripper would struggle to find that one. So I tend to dismiss the security concerns as not really a big deal. It is up to the end-user to properly secure their machines as always. Many probably have poor passwords anyway.
So on this issue whatever our users think. Let's see how this thread goes over time.
|
|
kiezel
Crew Member
Posts: 143
Likes: 219
|
Post by kiezel on May 15, 2021 19:30:16 GMT
You could see it as a minor security flaw as someone could see your password length. But if they are that close it would seem to me they also you typing it, lmao. Indeed... Furthermore, you already do get feedback when typing your password for using graphical applications with root permissions, so the security aspect is a bit moot, I think. Personally, I feel that adding the feedback in the terminal improves consistency in the user experience (because of those graphical applications that already do give that feedback) and it's user-friendlier for Linux beginners. Heck, it's even user-friendlier for an old hand like I, because I'm a sloppy typist... |
|
cooler
Crew Member
Posts: 123
Likes: 120
|
Post by cooler on May 16, 2021 4:55:50 GMT
My personal opinion is that it's not needed. If I type a password I look at the keyboard and press more firmly to be sure all characters are registered.
While it can be useful for character input confirmation for the ne that don't type very fast I don't think people using long passwords are going to count the * .
But Kiezel it's nice that you try to prevent the problems a part of users would have. And congratulations for easylinuxtipsproject.
|
|
