GNOME Bugzilla – Bug 568656
Last.fm Settings Dialog - Password Length Changes
Last modified: 2009-03-09 17:38:13 UTC
After setting your username and password in the Last.fm setting dialog, close the windows. If you re-open the dialog you will realise that the password field has more characters than your actual password. It appears that the length is the same as that of the value stored in the gconf key.
Is this a problem? Having the correct password length in there tells people the length of your password, which you probably wouldn't want people to know.
As a security measure it is good to have this behaviour but it does cause a bit of confusion as it is not expected and differs from the behaviour of most other applications.
This is definitely a valid bug, but it's really a bug in how we store the password. We currently store just the md5 hash of it, but this isn't right. We should really use the GNOME keyring. Given that, I'm closing this as a duplicate of the keyring bug, since fixing that will mean this is also fixed. *** This bug has been marked as a duplicate of 358811 ***