From mboxrd@z Thu Jan 1 00:00:00 1970 From: Danny Milosavljevic Subject: bug#35540: Installer displays encrypted partition password entry in cleartext Date: Fri, 3 May 2019 11:30:18 +0200 Message-ID: <20190503113018.5be80808@scratchpost.org> References: <20190503085437.opsw5whdkzmwrbrm@pelzflorian.localdomain> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; boundary="Sig_/3b/r9ZKbZRorTK4b0udN4Vv"; protocol="application/pgp-signature" Return-path: Received: from eggs.gnu.org ([209.51.188.92]:38797) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1hMUX1-000690-7o for bug-guix@gnu.org; Fri, 03 May 2019 05:31:05 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1hMUX0-0005yy-Ag for bug-guix@gnu.org; Fri, 03 May 2019 05:31:03 -0400 Received: from debbugs.gnu.org ([209.51.188.43]:34200) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1hMUX0-0005yX-7i for bug-guix@gnu.org; Fri, 03 May 2019 05:31:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1hMUX0-0003gt-0M for bug-guix@gnu.org; Fri, 03 May 2019 05:31:02 -0400 Sender: "Debbugs-submit" Resent-Message-ID: In-Reply-To: <20190503085437.opsw5whdkzmwrbrm@pelzflorian.localdomain> List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+gcggb-bug-guix=m.gmane.org@gnu.org Sender: "bug-Guix" To: "pelzflorian (Florian Pelz)" Cc: 35540@debbugs.gnu.org --Sig_/3b/r9ZKbZRorTK4b0udN4Vv Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable Hi, On Fri, 3 May 2019 10:54:37 +0200 "pelzflorian (Florian Pelz)" wrote: > When creating an encrypted partition in Manual partitioning (maybe > also Guided?) in the Newt installer, it asks for a password with which > to encrypt the partition. However only the password confirmation > password entry diplays ******* instead of the typed password, the > password entry before displays the password in cleartext. Yes. What about it is a bug? It would be very bad if you had a typo in the partition encryption password, so it's good that it's visible. If you want, we can make the password visible in both boxes. But we shouldn't make it invisible in both boxes. --Sig_/3b/r9ZKbZRorTK4b0udN4Vv Content-Type: application/pgp-signature Content-Description: OpenPGP digital signature -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEds7GsXJ0tGXALbPZ5xo1VCwwuqUFAlzMCioACgkQ5xo1VCww uqWL2AgAj9aAEKsH03pKBAjguHsdDpHQOffrqzC6S2uBwVNtZ+SIZh4lBvWS7zfX A9W68nZzMeSZiYmH/sYk6iq68MaZNBydAWFspX1qpzsyCs0ENiTa2WVpbLEqV7kr kb1V1XV3iotOvfhO/mv+soQ3sxFtLlP0Ewc5B5TkEoCDV2UubKihRbvEeqGKD3+4 1GRc0dONYrQKW1ZvoV7INz/ZvQhd9eKw1ulljcVxDUknAunUbOnxq9b9lQPDUj5k CNC2rLvBcVqK6JaKEFmsTp2hnWdkT6CQD7pmHMFkVkrw4/R/4rXnbOFWAg3UzfX9 U0qv8S6W1IT32bbbNh34o3vzP1y9eg== =WUYM -----END PGP SIGNATURE----- --Sig_/3b/r9ZKbZRorTK4b0udN4Vv--