[opensuse-factory] gnome password dialog changes
hi, recently gnome upstream changed the default to show the last character you typed into a password dialog. This is similar to what e.g. Android does. This didnt bother me because there was a setting to turn off that behavior: /etc/gtk-3.0/settings.ini gtk-entry-password-hint-timeout = 0 But with a new commit [1] they ignore that option now. I would like to ask to revert that last bit and leave the option intact for people who really dont want the new behavior. With kind regards, darix [1] https://mail.gnome.org/archives/commits-list/2013-July/msg03050.html -- openSUSE - SUSE Linux is my linux openSUSE is good for you www.opensuse.org -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
Quoting Marcus Rueckert <darix@opensu.se>:
hi,
recently gnome upstream changed the default to show the last character you typed into a password dialog. This is similar to what e.g. Android does. This didnt bother me because there was a setting to turn off that behavior:
Please also read the respective blogs arguing about pros and cons of password masking: https://www.schneier.com/blog/archives/2009/07/the_pros_and_co.html
But with a new commit [1] they ignore that option now. I would like to ask to revert that last bit and leave the option intact for people who really dont want the new behavior.
Note: this is only in effect on the primary screen. any additional screen will mask the passwords (so, when you're in a room full of geeks watching you type on a beamer, they will not see you as you type along). And, as usual: we prefer to stay as close to upstream behavior as possible. But if there are sound reasons to deviate, we do so. Best regards, Dominique -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
On 2013-08-21 12:09:04 +0200, Dominique Leuenberger a.k.a. Dimstar wrote:
recently gnome upstream changed the default to show the last character you typed into a password dialog. This is similar to what e.g. Android does. This didnt bother me because there was a setting to turn off that behavior:
Please also read the respective blogs arguing about pros and cons of password masking: https://www.schneier.com/blog/archives/2009/07/the_pros_and_co.html
read it and still propose to do the change.
But with a new commit [1] they ignore that option now. I would like to ask to revert that last bit and leave the option intact for people who really dont want the new behavior.
Note: this is only in effect on the primary screen. any additional screen will mask the passwords (so, when you're in a room full of geeks watching you type on a beamer, they will not see you as you type along).
And, as usual: we prefer to stay as close to upstream behavior as possible. But if there are sound reasons to deviate, we do so.
Even if the secondary display uses a different behavior. With current screen sizes (21-27") i prefer the old behavior also on my primary screen. darix -- openSUSE - SUSE Linux is my linux openSUSE is good for you www.opensuse.org -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
On 21 August 2013 11:09, Dominique Leuenberger a.k.a. Dimstar <dimstar@opensuse.org> wrote:
And, as usual: we prefer to stay as close to upstream behavior as possible. But if there are sound reasons to deviate, we do so.
This is one of those times where I think deviating makes sense for us +1 from me for leaving the option intact -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
Dominique Leuenberger a.k.a. Dimstar wrote:
Quoting Marcus Rueckert <darix@opensu.se>:
recently gnome upstream changed the default to show the last character you typed into a password dialog. This is similar to what e.g. Android does. This didnt bother me because there was a setting to turn off that behavior:
Please also read the respective blogs arguing about pros and cons of password masking: https://www.schneier.com/blog/archives/2009/07/the_pros_and_co.html
But with a new commit [1] they ignore that option now. I would like to ask to revert that last bit and leave the option intact for people who really dont want the new behavior.
Note: this is only in effect on the primary screen. any additional screen will mask the passwords (so, when you're in a room full of geeks watching you type on a beamer, they will not see you as you type along).
And, as usual: we prefer to stay as close to upstream behavior as possible. But if there are sound reasons to deviate, we do so.
Unfortunately sometimes the creators of programs don't have a full overview of the use cases of their programs. Here at work it's quite common for someone to look on my laptop screen while I have to log into e.g. bugzilla or do something that requires the root password. Is it possible for GNOME to detect what kind of hardware device it's running on or where the input is coming from? I agree that on a small touch screen unmasking the last typed character helps a lot because the input is inaccurate. On a keyboard this is hardly a problem though. So the text entry behavior maybe needs to change depending on the device. For more complicated use cases like wifi passphrases a way to unmask the full entry would be useful independent of the hardware. That would avoid having to copy&paste from a text editor :-) cu Ludwig -- (o_ Ludwig Nussel //\ V_/_ http://www.suse.de/ SUSE LINUX Products GmbH, GF: Jeff Hawn, Jennifer Guild, Felix Imendörffer, HRB 16746 (AG Nürnberg) -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Wednesday, 2013-08-21 at 11:57 +0200, Marcus Rueckert wrote:
recently gnome upstream changed the default to show the last character you typed into a password dialog. This is similar to what e.g. Android does.
As an android user, I would prefer to either show the entire password, or none at all, at my choice. Android has to show at least the last letter because typing on their touch displays can be very error prone. This doesn't happen in Linux, where you normally use a standard keyboard - unless they are targetting for touch-displays now. - -- Cheers, Carlos E. R. (from 12.3 x86_64 "Dartmouth" at Telcontar) -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.19 (GNU/Linux) iEYEARECAAYFAlIV06AACgkQtTMYHG2NR9UwOQCgilkKOkaHVp/cULy9sTpZE8Ol JBsAmwXLjFULvlSWFwRaTxLb67NuJj9y =f1mY -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
Quoting "Carlos E. R." <robin.listas@telefonica.net>:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
On Wednesday, 2013-08-21 at 11:57 +0200, Marcus Rueckert wrote:
recently gnome upstream changed the default to show the last character you typed into a password dialog. This is similar to what e.g. Android does.
As an android user, I would prefer to either show the entire password, or none at all, at my choice. Android has to show at least the last letter because typing on their touch displays can be very error prone.
This doesn't happen in Linux, where you normally use a standard keyboard - unless they are targetting for touch-displays now.
Did you read the links posted? And yes: Touch IS a target of GNOME (not the only one, but 'A' target). Dominique -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
Am 22.08.2013 11:07, schrieb Dominique Leuenberger a.k.a. Dimstar:
Quoting "Carlos E. R." <robin.listas@telefonica.net>:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
On Wednesday, 2013-08-21 at 11:57 +0200, Marcus Rueckert wrote:
recently gnome upstream changed the default to show the last character you typed into a password dialog. This is similar to what e.g. Android does.
As an android user, I would prefer to either show the entire password, or none at all, at my choice. Android has to show at least the last letter because typing on their touch displays can be very error prone.
This doesn't happen in Linux, where you normally use a standard keyboard - unless they are targetting for touch-displays now.
Did you read the links posted? And yes: Touch IS a target of GNOME (not the only one, but 'A' target).
This is accepted I guess, but different "platforms" have different needs and I would want to have the option (or even autodetected) to not show the last letter on a normal desktop system. Removing the setting is really too much IMHO. Wolfgang -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
On Thu, 22 Aug 2013 11:02, Carlos E. R. <robin.listas@...> wrote:
On Wednesday, 2013-08-21 at 11:57 +0200, Marcus Rueckert wrote:
recently gnome upstream changed the default to show the last character you typed into a password dialog. This is similar to what e.g. Android does.
As an android user, I would prefer to either show the entire password, or none at all, at my choice. Android has to show at least the last letter because typing on their touch displays can be very error prone.
This doesn't happen in Linux, where you normally use a standard keyboard - unless they are targetting for touch-displays now.
{Rant} Hello, reality? Check it please. What is the up-and-comming-for-everything tech? -- touch-displays. Keeping the dialog configurable (no-show/last-show/show-all) is a must in my eyes. As a distro we have very little influence on what devices OSS will be installed. -- But we have the lagre side of the lever on how the distro will "feel" to the users. Not to mention: the whole "Accessability". Lots of work has been done to get Linux as base and the surrounding distros working and usable for people with more limits than others. That Gnome, of all DEs, drop configurable ATK in this matter is a massive shame. Try getting a Parkinson-patient to entering passwords without seeing at least the last char? Good luck, well, there goes Gnome. At the same time: For Admins that is a security risk of massive dimensions, so no Gnome for them. Configurability is THE key for a Linux Distro. -- But maybe it should be easier to rollback config-changes (even all the way bay to sane defaults) in a controlled manner. {/Rant} - Yamaban. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
participants (7)
-
Carlos E. R. -
Dominique Leuenberger a.k.a. Dimstar -
Ludwig Nussel -
Marcus Rueckert -
Richard Brown -
Wolfgang Rosenauer -
Yamaban