Search:  

 
 
   All ForumsHot TopicsGallery






how-to block ads


 
Forums » Up and Running » Security » Security » Stop Password Masking
Search Topic:
Share Topic:
RSS topic:
toggle:
flat / full
normal / watch
Posting:
Post a:
Post a:
Femtocell Question »
« Obama's internet monitoring plan moves forward  
AuthorAll Replies


EGeezer
Go Bobcats
Premium
join:2002-08-04
Country!
·Callcentric
·RoadRunner Cable
·AT&T CallVantage

reply to antdude
Re: Stop Password Masking

How about setting a default which can be overridden depending on the user's or administrator's preferences or requirements?

Now there's an idea..
--
The greatest dangers to liberty lurk in insidious encroachment by men of zeal, well-meaning but without understanding. -- Justice Louis D. Brandeis


Kilroy
Premium,MVM
join:2002-11-21
Ann Arbor, MI
·WOW Internet and C..

said by EGeezer See Profile :

How about setting a default which can be overridden depending on the user's or administrator's preferences or requirements?
That was in the article. Basically set a default configuration, either masked or not masked, and a check box to let the user change it to their liking.
--
When will the people realize that with DRM they aren't purchasing anything?


nwrickert
sand groper
Premium,MVM
join:2004-09-04
Geneva, IL
·AT&T U-Verse
·AT&T Midwest

reply to EGeezer
How about setting a default which can be overridden depending on the user's or administrator's preferences or requirements?
I'm wondering what people are talking about here. Where would a default be set?

I use passwords in numerous places and in numerous ways. It seems to me that there would be almost as many default settings as there are passwords.

What I find more troubling, are the web pages that are designed to prevent your browser or password manager from remembering the passwords for you.
--
AT&T dsl; Speedstream 5100b modem; openSuSE 11.0; firefox 3.0.11

OZO
Premium
join:2003-01-17

said by nwrickert See Profile :

How about setting a default which can be overridden depending on the user's or administrator's preferences or requirements?
I'm wondering what people are talking about here. Where would a default be set?
What do you want to know?

Usually it's s standard control (type Edit Control, flag Password) and therefore it could be changed in one place (including this additional feature to show password in clear text or cover it with ***). Are you asking where settings should be kept? In registry, perhaps. In HKLM hive for all users, HKCU for particular user...

Actually it's a good idea and I support it. 99.9% cases I type password in environment where there is no any risk that someone is looking for it over my shoulder. In the rest of the cases (0.01%) I do not mind to ask - please give me a sec of confidentiality if person sitting close to me do not understand what's going on and what is appropriate behavior everyone should exhibit here... There some dumb folks around like in this case, but it's very rare.

Edit Control may show additional check boxes close to it (on any side of it) or react on the infamous occasion like setting CapsLock is on in a different way - when it's on - show *** (but accept typed characters without converting to upper case), when it's off - show clear password. There are other possibilities if one wants to think.

In my practice with IE I use IE7Pro script "Show Password on MouseOver". It mitigates the problem a bit. But I'd prefer a system wide solution to show password in clear text in almost all cases, except I'd ask to do otherwise.
--
Keep it simple, it'll become complex by itself...


nwrickert
sand groper
Premium,MVM
join:2004-09-04
Geneva, IL
·AT&T U-Verse
·AT&T Midwest

Usually it's s standard control (type Edit Control, flag Password) and therefore it could be changed in one place (including this additional feature to show password in clear text or cover it with ***). Are you asking where settings should be kept? In registry, perhaps. In HKLM hive for all users, HKCU for particular user...
Okay, thanks for clearing that up.

Now if you could explain where I find that setting in linux, in solaris, in my SSH server, ...
--
AT&T dsl; Speedstream 5100b modem; openSuSE 11.0; firefox 3.0.11

OZO
Premium
join:2003-01-17
Well, that's why applications should use standard controls. There is no need for different implementations of GUI control sets.
--
Keep it simple, it'll become complex by itself...


nwrickert
sand groper
Premium,MVM
join:2004-09-04
Geneva, IL
·AT&T U-Verse
·AT&T Midwest

Well, that's why applications should use standard controls. There is no need for different implementations of GUI control sets.
That doesn't help with entering passwords in command line applications.
--
AT&T dsl; Speedstream 5100b modem; openSuSE 11.0; firefox 3.0.11

OZO
Premium
join:2003-01-17


1 edit
Everything could be possible if you have a determination. I suppose that entering passwords in command line could be redesigned too. It requires additional care, because buffer may keep that for a while, but it's possible to mitigate as well.
--
Keep it simple, it'll become complex by itself...


Its a Secret
Whatever
Premium
join:2008-02-23
U B Funny
·Shaw

reply to EGeezer
said by EGeezer See Profile :

How about setting a default which can be overridden depending on the user's or administrator's preferences or requirements?

Now there's an idea..
Darn, there ya go making sense again...
--
"In the future, that which is not mandatory will be illegal"
"Nobody knows the age of the human race, but everybody agrees that it is old enough to know better" - Anonymous
-
Forums » Up and Running » Security » SecurityFemtocell Question »
« Obama's internet monitoring plan moves forward  


Thursday, 03-Dec 10:23:17 Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
over 10 years online! © 1999-2009 dslreports.com.
page compression OFF
Most commented news this week
· [162] Comcast Releasing Promised Usage Meter
· [112] Avast Antivirus Has Gone Mad
· [102] Graduate Student Unveils Sprint's GPS Sharing With Feds
· [80] Latest Consumer Reports Survey Not Kind To AT&T
· [70] Baltimore To Ban Lazy Cable Installs
· [63] Broadband Killed The Game Console
· [55] Rogers Unveils The ISP Dream Model
· [47] ACTA: Global Three Strikes
· [41] Rural Carriers Quickly Embracing Fiber
· [41] Cable Industry's 'Adoption Plus': Altruism Or PR Stunt?
Most people now reading
· False positive in Avast! or is it real? [Security]
· [TWC] Audio/Video outage in Brooklyn [Time Warner Cable TV/Voice]
· [Rant] Disrespect of PTO [Rants, Raves, and Praise]
· outdoor to indoor conduit power run [Home Repair & Improvement]
· Many Sites Unreachable [Rogers]
· Quality/longevity of 15A 120V receptacles [Home Repair & Improvement]
· IMG 1.7 (IMG Updates and Discussion) [Verizon FIOS TV]
· [WotLK] Doing away w/ conquest? [World of Warcraft]
· Microsoft actively urges IE 6 users to upgrade [Security]
· Working in a Stairwell and Surrounding High Walls [Home Repair & Improvement]