Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 24 Dec 2004 21:34:56 +0200
From:      Giorgos Keramidas <keramida@ceid.upatras.gr>
To:        Mervin McDougall <mcd_advisory@yahoo.com>
Cc:        freebsd-newbies <freebsd-newbies@freebsd.org>
Subject:   Re: Password revelation
Message-ID:  <20041224193456.GB67543@gothmog.gr>
In-Reply-To: <20041224192519.69174.qmail@web61204.mail.yahoo.com>
References:  <20041224192519.69174.qmail@web61204.mail.yahoo.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On 2004-12-24 11:25, Mervin McDougall <mcd_advisory@yahoo.com> wrote:
> Here is something I noticed when installing freebsd 5.3 on my
> laptop. At the point where Freebsd asks whether you want to make any
> users and presents you with the screen where you can add users to your
> system during the installation process, I noticed that after entering
> the password...you can reveal the password by simply pressing the back
> arrow. I am not sure if that is true on all bsd installations but
> while installing 5.3 I noticed that though the keys were concealed
> with asterisks when typing , pressing the back arrow revealed the keys
> that were pressed and the password for the new user.

Ooops!  This sounds like a bug in the way sysinstall works.

Are you familiar with the Gnats database of FreeBSD problem reports?
I think you should file a bug report describing this.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20041224193456.GB67543>