After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 773465 - Shift and Enter twice inadvertantly reveals password.
Shift and Enter twice inadvertantly reveals password.
Status: RESOLVED DUPLICATE of bug 740043
Product: gnome-shell
Classification: Core
Component: login-screen
3.22.x
Other Linux
: Normal major
: ---
Assigned To: Ray Strode [halfline]
gnome-shell-maint
Depends on:
Blocks:
 
 
Reported: 2016-10-25 09:49 UTC by Simon Hollenbach
Modified: 2016-10-25 14:58 UTC
See Also:
GNOME target: ---
GNOME version: ---



Description Simon Hollenbach 2016-10-25 09:49:22 UTC
When logging in and not releasing the shift key after entering your password, which is not so uncommon if your last password character is a capital letter, and then hitting enter twice (e.g., because you are nervous or in a hurry), you inadvertantly reveal your password to anyone watching your screen because "Show password" is selected and the cleartext password is shown on your screen.

This has major implications in work- and public environments or if you do a public screencast.
Comment 1 Simon Hollenbach 2016-10-25 09:52:40 UTC
This relates to https://bugzilla.redhat.com/show_bug.cgi?id=1178806 which was automatically closed because of EOL.
Comment 2 Marius Gedminas 2016-10-25 09:55:10 UTC
I accidentally exposed part of my password to a coworker when I did this while unlocking my screen in a hurry.

(I'd assumed that I somehow hit the <Menu> key, not realizing that Shift-Enter shows the popup menu.)
Comment 3 Ray Strode [halfline] 2016-10-25 14:58:14 UTC
Thanks for taking the time to report this.
This particular bug has already been reported into our bug tracking system, but please feel free to report any further bugs you find.

*** This bug has been marked as a duplicate of bug 740043 ***