Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Security issue: Password leakage. #139

Closed
plutocrat opened this issue Mar 9, 2015 · 2 comments
Closed

Security issue: Password leakage. #139

plutocrat opened this issue Mar 9, 2015 · 2 comments

Comments

@plutocrat
Copy link

I'm using Mint 17.1 with the default Mint-X login screen. I have more than one account on my computer. On booting up the computer, the last used login is selected, and the cursor is in the password field. So far so good.
If I mistype the password and press return, the red error message about incorrect credentials comes up. However, now the focus has moved away from the password field, and away from both of the existing accounts, so that if you retype the password it appears in large type on the screen as a new Login Name.
Clearly this is a security issue if other people are in the room.
My suggestion would be to retain focus in the password box, and require the user to manually select a different Login name.

@EddardStark
Copy link

Alongside being a security issue, this behaviour is extremely annoying. I second this suggestion.

@plutocrat
Copy link
Author

The workaround is to use another login screen. I set mine to MDModern, which doesn't exhibit this behaviour

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants