[6181] in bugtraq

home help back first fref pref prev next nref lref last post

Re: FreeBSD getpass "feature"

daemon@ATHENA.MIT.EDU (Guido van Rooij)
Thu Feb 26 11:49:30 1998

Date: 	Thu, 26 Feb 1998 09:07:09 +0100
Reply-To: Guido van Rooij <Guido.vanRooij@NL.CIS.PHILIPS.COM>
From: Guido van Rooij <Guido.vanRooij@NL.CIS.PHILIPS.COM>
X-To:         regnauld@DEEPO.PROSA.DK
To: BUGTRAQ@NETSPACE.ORG
In-Reply-To:  <19980225193927.16445@deepo.prosa.dk> from Philippe Regnauld at
              "Feb 25, 98 07:39:27 pm"

>
>         I always saw this as a "feature", just like s/key (at least on
>         FreeBSD) that would echo your pass on login if you typed return
>         on the first password prompt.  Of course, echoing the password
>         should is strongly discouraged on a remote session, but then
>         again packet sniffing will catch you either way.
>
>         I thought it was quite handy on lossy/extremely slow links.
>

You see how a bug turns out into a feature ;-)

Anyway, this was a real bug in the signal handling. It is still not
perfect and I'm planning a fix, though I have more important todo's
right now.

-Guido

home help back first fref pref prev next nref lref last post