Inconsistent security measures for password protection in Dapper
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
gksu (Ubuntu) |
Invalid
|
Undecided
|
Unassigned |
Bug Description
Binary package hint: update-notifier
As reported in Bug #54741, the focus-stealing behaviour of metacity makes it *very* easy to type an ssh (or other) password in the wrong window if there's a new window opening. Since I have been told that this behaviour should be considered a "feature" and following the recommendation from Ubuntu developers, the only consistent thing to do would be to remove the "password desktop freezing" in the update-notifier applet. By freezing the desktop and blanking the background (to prevent the password being typed in the wrong window), Ubuntu is inconsistent with the important allegedly feature in Metacity that mandates that passwords end up being typed in random windows from time to time.
Thanks for your bugreport.
Unfortunately I have to reject it because I value thing this is a important feature of gksu.
Cheers,
Michael