The OpenNET Project
 
Search (keywords):  SOFT ARTICLES TIPS & TRICKS SECURITY
LINKS NEWS MAN DOCUMENTATION


FreeBSD getpass "feature"


<< Previous INDEX Search src Set bookmark Go to bookmark Next >>
X-RDate: Thu, 26 Feb 1998 14:24:17 +0500 (ESK)
Date: Wed, 25 Feb 1998 19:39:27 +0100
From: Philippe Regnauld <regnauld@deepo.prosa.dk.>
To: [email protected]
Subject: Re: FreeBSD getpass "feature"

GvS One writes:
> Hi, netters!
>
> I just found some discouraging feature of the getpass(3) function,
> which affects the all programs which are using it: passwd, login, ...
> When you press ^C (send intr) at the password prompt, you... can enter
> then password visible (echoed). It does _not_ affect slogin/ssh
> package because it uses other password giving mechanism.

        I always saw this as a "feature", just like s/key (at least on
        FreeBSD) that would echo your pass on login if you typed return
        on the first password prompt.  Of course, echoing the password
        should is strongly discouraged on a remote session, but then
        again packet sniffing will catch you either way.

        I thought it was quite handy on lossy/extremely slow links.


--
 -[ Philippe Regnauld / sysadmin / [email protected] / +55.4N +11.3E ]-
     ╚Pluto placed his bad dog at the entrance of Hades to keep the dead
            IN and the living  OUT!  The archetypical corporate firewall?╩
                      - S. Kelly Bootle, ("MYTHOLOGY", in Marutukku distrib)


<< Previous INDEX Search src Set bookmark Go to bookmark Next >>



Партнёры:
PostgresPro
Inferno Solutions
Hosting by Hoster.ru
Хостинг:

Закладки на сайте
Проследить за страницей
Created 1996-2024 by Maxim Chirkov
Добавить, Поддержать, Вебмастеру