[Bug 439059] New: No password encryption in Yast for wireless network.
https://bugzilla.novell.com/show_bug.cgi?id=439059 Summary: No password encryption in Yast for wireless network. Product: openSUSE 11.1 Version: Beta 3 Platform: x86-64 OS/Version: openSUSE 10.3 Status: NEW Severity: Enhancement Priority: P5 - None Component: Security AssignedTo: security-team@suse.de ReportedBy: frankebay99@gmail.com QAContact: qa@suse.de Found By: Community User In the Network Devices, when editing the wireless card, once you get to edit the device settings in Wireless Network Card Configuration menu, the Encryption Key for the communication with the router (WEP, WPA, etc.) is not hidden or replaced by stars (******). Therefore it could be possible for someone with malicious intentions to read the passphrase. I think it would be good to replace the key by stars or hide it and have a way to display it which would require the user's password (not the root PW, cuz the connectivity is set up by the user, so it needs to be the user's PW). tnx -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=439059 User frankebay99@gmail.com added comment https://bugzilla.novell.com/show_bug.cgi?id=439059#c1 --- Comment #1 from Francis Lamonde <frankebay99@gmail.com> 2008-10-26 10:52:54 MDT --- Created an attachment (id=248015) --> (https://bugzilla.novell.com/attachment.cgi?id=248015) Encryption key not hidden Screenshot of the encryption key not hidden. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=439059 Thomas Biege <thomas@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|security-team@suse.de |yast2-maintainers@suse.de -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=439059 Duncan Mac-Vicar <dmacvicar@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |dmacvicar@novell.com AssignedTo|yast2-maintainers@suse.de |mzugec@novell.com Priority|P5 - None |P3 - Medium -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=439059 User lnussel@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=439059#c2 Ludwig Nussel <lnussel@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |security-team@suse.de Component|Security |YaST2 Summary|No password encryption in Yast for wireless |No password obfuscation in Yast for wireless |network. |network --- Comment #2 from Ludwig Nussel <lnussel@novell.com> 2008-10-27 04:21:51 MDT --- I'm not sure this is worth changing at all. The person that sits besides you might actually be the one that just spells out the passphrase for you to type in. So let's not flag this a security issue. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=439059 User mzugec@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=439059#c3 Michal Zugec <mzugec@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |FIXED --- Comment #3 from Michal Zugec <mzugec@novell.com> 2008-10-30 04:22:56 MDT --- fixed -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=439059 User frankebay99@gmail.com added comment https://bugzilla.novell.com/show_bug.cgi?id=439059#c4 --- Comment #4 from Francis Lamonde <frankebay99@gmail.com> 2008-11-30 19:40:29 MST --- 11.1 64-Bits RC1 Wow, nicely done, very secure now. Fixed, plz close. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply＠novell.com