Results 1 to 7 of 7

Thread: Saved Passwords and the "show password" feature...

  1. #1
    Join Date
    May 2011
    Beans
    2

    Saved Passwords and the "show password" feature...

    Hey guys,

    I just today noticed, that in the Password/Keyring manager (seahorse),
    my "favourite" button, the "show password" button exists.

    I cannot understand how people can include such a thing,
    as this is the reason I NEVER save passwords on firefox.

    What if someone sits on my PC while im not in the room?
    As this is a notebook which I use "everywhere", this is quite important for me.

    the ability to sit on my pc for 2 minutes and see my passwords is... ermm...

    how can I disable this "feature"(or rather security issue?)?

    My Notebook is setup so it needs no password for "normal usage",
    but as soon as someone wants to go to far, it needs a password.

    Also I'm missing the function to "autologin" the keyring.
    I dont want to have a password field with every wakeup from hibernate.

  2. #2
    Join Date
    Apr 2011
    Beans
    485

    Re: Saved Passwords and the "show password" feature...

    cntrl-alt-L

    Which fixes the real issue, letting others on in the first place.
    Life is an extraordinarily long concatenation of luck and coincidence.

  3. #3
    Join Date
    Jun 2011
    Location
    The Shadow Gallery
    Beans
    6,807

    Re: Saved Passwords and the "show password" feature...

    Quote Originally Posted by zanval View Post
    Hey guys,

    I just today noticed, that in the Password/Keyring manager (seahorse),
    my "favourite" button, the "show password" button exists.

    I cannot understand how people can include such a thing,
    as this is the reason I NEVER save passwords on firefox.

    What if someone sits on my PC while im not in the room?
    As this is a notebook which I use "everywhere", this is quite important for me.

    the ability to sit on my pc for 2 minutes and see my passwords is... ermm...

    how can I disable this "feature"(or rather security issue?)?

    My Notebook is setup so it needs no password for "normal usage",
    but as soon as someone wants to go to far, it needs a password.

    Also I'm missing the function to "autologin" the keyring.
    I dont want to have a password field with every wakeup from hibernate.
    If you allow people to sit and use your PC when you are logged in then it doesnt make any difference if they can see your password.

    Security 101, physical access is root access anyways.

    In one breath you are complaining about the security flaw as it were then asking to turn on autologin so you dont need to enter passwords and you let people use your PC when logged in ....LOL

    Dont let people sit at your computer and log out when you leave it unattended or at least lock it
    Feel Free to Bitcoin Tip: 135Rp4pwwYTHEJ4u8bxKaDQiC91N9LUoV2

    Backtrack - Giving machine guns to monkeys since 2006
    Kali-Linux - Adding a grenade launcher to the machine guns since 2013

  4. #4
    Join Date
    Apr 2006
    Location
    Montana
    Beans
    Hidden!
    Distro
    Kubuntu Development Release

    Re: Saved Passwords and the "show password" feature...

    Quote Originally Posted by haqking View Post
    If you allow people to sit and use your PC when you are logged in then it doesnt make any difference if they can see your password.

    Security 101, physical access is root access anyways.

    In one breath you are complaining about the security flaw as it were then asking to turn on autologin so you dont need to enter passwords and you let people use your PC when logged in ....LOL

    Dont let people sit at your computer and log out when you leave it unattended or at least lock it
    I agree 100 % , either secure your box or quit complaining.

    Step one would be to disable automatic log in.

    Step two would be to log out or lock the account when not in use.

    Step three - each user gets a unique account.

    If you autologin and share your account you can not expect privacy or security.
    There are two mistakes one can make along the road to truth...not going all the way, and not starting.
    --Prince Gautama Siddharta

    #ubuntuforums web interface

  5. #5
    Join Date
    May 2011
    Beans
    2

    Re: Saved Passwords and the "show password" feature...

    I know that people could mess with things.
    I would like a setup where everyone could "use" the pc,
    but not see my passwords or such.
    I know that even without superuser password running an rm command on my personal folder is easy..

    I am considering making a "Guest" Account, but this would be the way "I would like it to act".

    And I don't understand why the passwords are so easily viewable just because the account is logged in. I personally would prefer a way where the password is saved, but not displayed anywhere. Maybe it's because I never forget a password, but its just not necessary for me.

  6. #6
    Join Date
    Jun 2011
    Location
    The Shadow Gallery
    Beans
    6,807

    Re: Saved Passwords and the "show password" feature...

    Quote Originally Posted by zanval View Post
    I know that people could mess with things.
    I would like a setup where everyone could "use" the pc,
    but not see my passwords or such.
    I know that even without superuser password running an rm command on my personal folder is easy..

    I am considering making a "Guest" Account, but this would be the way "I would like it to act".

    And I don't understand why the passwords are so easily viewable just because the account is logged in. I personally would prefer a way where the password is saved, but not displayed anywhere. Maybe it's because I never forget a password, but its just not necessary for me.

    Then lock the feature so your password is required to view it.

    however if you are going to give people access to your machine under your login then you may aswell smash your machine with a claw hammer right now
    Feel Free to Bitcoin Tip: 135Rp4pwwYTHEJ4u8bxKaDQiC91N9LUoV2

    Backtrack - Giving machine guns to monkeys since 2006
    Kali-Linux - Adding a grenade launcher to the machine guns since 2013

  7. #7
    Join Date
    May 2010
    Location
    Currently sunny FL.
    Beans
    306
    Distro
    Xubuntu 12.04 Precise Pangolin

    Re: Saved Passwords and the "show password" feature...

    Quote Originally Posted by zanval View Post
    Hey guys,

    I just today noticed, that in the Password/Keyring manager (seahorse),
    my "favourite" button, the "show password" button exists.

    I cannot understand how people can include such a thing,
    as this is the reason I NEVER save passwords on firefox.

    What if someone sits on my PC while im not in the room?
    As this is a notebook which I use "everywhere", this is quite important for me.

    the ability to sit on my pc for 2 minutes and see my passwords is... ermm...

    how can I disable this "feature"(or rather security issue?)?

    My Notebook is setup so it needs no password for "normal usage",
    but as soon as someone wants to go to far, it needs a password.

    Also I'm missing the function to "autologin" the keyring.
    I dont want to have a password field with every wakeup from hibernate.

    So like ... it's too much work to take a couple of seconds to log off before you leave the room?
    Or how about creating a guest user that you switch to when you leave?
    Of course you could always elect to save passwords in an app like gpass ... I do.
    Hmmmm, you could just enable the screensaver with a locked (login password) screen?
    There are clearly solutions that would accommodate not only you, but also the millions of us who do like to keep many passwords on file in our browser. Due to my work with websites and protected documents I myself have probably around 40 passwords that I use pretty regularily. It's a heck of a lot more convenient than accessing a third application (which I also use - gpass) all of the time. Sometimes however we may rebuild our machine or lose a few passwords during an upgrade or after a particular site has been updated ... and then the show passwords feature turns into a potential life safer!

    .
    PLEASE ... don't waste anyone's time (your own included) with foolish or utterly useless comments!

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •