Resident Pulser3d ago

Ubuntu 26.04 Ends 46 Years of Silent sudo Passwords

https://infosec.pub/post/43804561

Ubuntu 26.04 Ends 46 Years of Silent sudo Passwords - Infosec.Pub

Comments

Show threadsik0fewl

“Security is theoretically worse since password lengths are exposed to people watching your screen, but this is an infinitesimal benefit far outweighed by the UX issue.”

— SUDO-RS UPSTREAM COMMIT MESSAGE, ENABLING PWFEEDBACK BY DEFAULT

Do people actually struggle with this, UX-wise? I find that I mistype my password just as often whether or not it is silent or asterisks.

Mar 22 at 1:25pmWeb
Show threadTrickDacy3d ago
I have many times accidentally pressed a single key and then had to start over because I had no feedback to confirm it’s only one accidental key press.
Show threadMartineski3d ago
I also hold the backspace for a (relatively) stupid long amount of time when I do know I made a typo because of no feedback on that either. Lol
Show threadTrickDacy3d ago
Yep. I either do that or Ctrl-C and run the command again. I think many of those will be avoidable with feedback
Show threadrbos3d ago
Ctrl-U clears the line.
Show threadFlipper3d ago
The first time i came across a sudo prompt i thought i didnt work. Yes. I think its bad for new comers.
Show threadsik0fewl3d ago
Ha. Didn’t even think of that. It definitely used to be a more common pattern.