 | ||||||
| << Previous | INDEX | Search | src | Set bookmark | Go to bookmark | Next >> |
| ||||||
| |||||||||||||||||||||
X-RDate: Thu, 26 Feb 1998 14:24:17 +0500 (ESK)
Date: Wed, 25 Feb 1998 19:39:27 +0100
From: Philippe Regnauld <regnauld@deepo.prosa.dk.>
To: BUGTRAQ@NETSPACE.ORG
Subject: Re: FreeBSD getpass "feature"
GvS One writes:
> Hi, netters!
>
> I just found some discouraging feature of the getpass(3) function,
> which affects the all programs which are using it: passwd, login, ...
> When you press ^C (send intr) at the password prompt, you... can enter
> then password visible (echoed). It does _not_ affect slogin/ssh
> package because it uses other password giving mechanism.
I always saw this as a "feature", just like s/key (at least on
FreeBSD) that would echo your pass on login if you typed return
on the first password prompt. Of course, echoing the password
should is strongly discouraged on a remote session, but then
again packet sniffing will catch you either way.
I thought it was quite handy on lossy/extremely slow links.
--
-[ Philippe Regnauld / sysadmin / regnauld@deepo.prosa.dk / +55.4N +11.3E ]-
╚Pluto placed his bad dog at the entrance of Hades to keep the dead
IN and the living OUT! The archetypical corporate firewall?╩
- S. Kelly Bootle, ("MYTHOLOGY", in Marutukku distrib)
| |||||||||||||||||||||
|
|