On 2013-08-21 12:09:04 +0200, Dominique Leuenberger a.k.a. Dimstar wrote:

...

recently gnome upstream changed the default to show the last character you typed into a password dialog. This is similar to what e.g. Android does. This didnt bother me because there was a setting to turn off that behavior:

Please also read the respective blogs arguing about pros and cons of password masking: https://www.schneier.com/blog/archives/2009/07/the_pros_and_co.html

read it and still propose to do the change.

...

But with a new commit [1] they ignore that option now. I would like to ask to revert that last bit and leave the option intact for people who really dont want the new behavior.

Note: this is only in effect on the primary screen. any additional screen will mask the passwords (so, when you're in a room full of geeks watching you type on a beamer, they will not see you as you type along).

And, as usual: we prefer to stay as close to upstream behavior as possible. But if there are sound reasons to deviate, we do so.

Even if the secondary display uses a different behavior. With current screen sizes (21-27") i prefer the old behavior also on my primary screen. darix -- openSUSE - SUSE Linux is my linux openSUSE is good for you www.opensuse.org -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org

Dominique Leuenberger a.k.a. Dimstar wrote:

Quoting Marcus Rueckert :

...

recently gnome upstream changed the default to show the last character you typed into a password dialog. This is similar to what e.g. Android does. This didnt bother me because there was a setting to turn off that behavior:

Please also read the respective blogs arguing about pros and cons of password masking: https://www.schneier.com/blog/archives/2009/07/the_pros_and_co.html

...

But with a new commit [1] they ignore that option now. I would like to ask to revert that last bit and leave the option intact for people who really dont want the new behavior.

Note: this is only in effect on the primary screen. any additional screen will mask the passwords (so, when you're in a room full of geeks watching you type on a beamer, they will not see you as you type along).

And, as usual: we prefer to stay as close to upstream behavior as possible. But if there are sound reasons to deviate, we do so.

Unfortunately sometimes the creators of programs don't have a full overview of the use cases of their programs. Here at work it's quite common for someone to look on my laptop screen while I have to log into e.g. bugzilla or do something that requires the root password. Is it possible for GNOME to detect what kind of hardware device it's running on or where the input is coming from? I agree that on a small touch screen unmasking the last typed character helps a lot because the input is inaccurate. On a keyboard this is hardly a problem though. So the text entry behavior maybe needs to change depending on the device. For more complicated use cases like wifi passphrases a way to unmask the full entry would be useful independent of the hardware. That would avoid having to copy&paste from a text editor :-) cu Ludwig -- (o_ Ludwig Nussel //\ V_/_ http://www.suse.de/ SUSE LINUX Products GmbH, GF: Jeff Hawn, Jennifer Guild, Felix Imendörffer, HRB 16746 (AG Nürnberg) -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org

Quoting "Carlos E. R." :

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1

On Wednesday, 2013-08-21 at 11:57 +0200, Marcus Rueckert wrote:

...

recently gnome upstream changed the default to show the last character you typed into a password dialog. This is similar to what e.g. Android does.

As an android user, I would prefer to either show the entire password, or none at all, at my choice. Android has to show at least the last letter because typing on their touch displays can be very error prone.

This doesn't happen in Linux, where you normally use a standard keyboard - unless they are targetting for touch-displays now.

Did you read the links posted? And yes: Touch IS a target of GNOME (not the only one, but 'A' target). Dominique -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org

On Thu, 22 Aug 2013 11:02, Carlos E. R. wrote:

On Wednesday, 2013-08-21 at 11:57 +0200, Marcus Rueckert wrote:

...

recently gnome upstream changed the default to show the last character you typed into a password dialog. This is similar to what e.g. Android does.

As an android user, I would prefer to either show the entire password, or none at all, at my choice. Android has to show at least the last letter because typing on their touch displays can be very error prone.

This doesn't happen in Linux, where you normally use a standard keyboard - unless they are targetting for touch-displays now.

{Rant} Hello, reality? Check it please. What is the up-and-comming-for-everything tech? -- touch-displays. Keeping the dialog configurable (no-show/last-show/show-all) is a must in my eyes. As a distro we have very little influence on what devices OSS will be installed. -- But we have the lagre side of the lever on how the distro will "feel" to the users. Not to mention: the whole "Accessability". Lots of work has been done to get Linux as base and the surrounding distros working and usable for people with more limits than others. That Gnome, of all DEs, drop configurable ATK in this matter is a massive shame. Try getting a Parkinson-patient to entering passwords without seeing at least the last char? Good luck, well, there goes Gnome. At the same time: For Admins that is a security risk of massive dimensions, so no Gnome for them. Configurability is THE key for a Linux Distro. -- But maybe it should be easier to rollback config-changes (even all the way bay to sane defaults) in a controlled manner. {/Rant} - Yamaban. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org