From owner-freebsd-newbies@FreeBSD.ORG Fri Dec 24 19:25:20 2004 Return-Path: Delivered-To: freebsd-newbies@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 649BE16A4CE for ; Fri, 24 Dec 2004 19:25:20 +0000 (GMT) Received: from web61204.mail.yahoo.com (web61204.mail.yahoo.com [216.155.196.128]) by mx1.FreeBSD.org (Postfix) with SMTP id E8A7B43D1D for ; Fri, 24 Dec 2004 19:25:19 +0000 (GMT) (envelope-from mcd_advisory@yahoo.com) Received: (qmail 69176 invoked by uid 60001); 24 Dec 2004 19:25:19 -0000 Comment: DomainKeys? See http://antispam.yahoo.com/domainkeys DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; b=Xwpe7O4uUnn2pWlxmPVc4JvqOS56eFxRu3cahoUjM4WKn6h/oEmbe02otH3QH1QbcX0NFPNshsUjSQDV0CcOaQo3mhS3HymTfR9+JcoZGzCqR4v8E+li9lm85zx1dIOvf5RD3UjGn0pNqN6w2WkINutpfdHisfrVPj6xIMwUy3M= ; Message-ID: <20041224192519.69174.qmail@web61204.mail.yahoo.com> Received: from [67.28.117.128] by web61204.mail.yahoo.com via HTTP; Fri, 24 Dec 2004 11:25:19 PST Date: Fri, 24 Dec 2004 11:25:19 -0800 (PST) From: Mervin McDougall To: freebsd-newbies MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Content-Filtered-By: Mailman/MimeDel 2.1.1 Subject: Password revelation X-BeenThere: freebsd-newbies@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Gathering place for new users List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 24 Dec 2004 19:25:20 -0000 Here is something I noticed when installing freebsd 5.3 on my laptop. At the point where Freebsd asks whether you want to make any users and presents you with the screen where you can add users to your system during the installation process, I noticed that after entering the password...you can reveal the password by simply pressing the back arrow. I am not sure if that is true on all bsd installations but while installing 5.3 I noticed that though the keys were concealed with asterisks when typing , pressing the back arrow revealed the keys that were pressed and the password for the new user. I think its best that the admin be nowhere next to the user if he is setting up an account for him/her --------------------------------- Do you Yahoo!? Yahoo! Mail - 250MB free storage. Do more. Manage less.