1. Computers
  2. Display Drivers
  3. Graphics Cards
  4. Memory
  5. Motherboards
  6. Processors
  7. Software
  8. Storage
  9. Operating Systems


Facebook RSS Twitter Twitter Google Plus


Phoronix Test Suite

OpenBenchmarking.org

Fedora 20 GNOME Bug Could Reveal Your Password

Fedora

Published on 26 November 2013 12:49 AM EST
Written by Michael Larabel in Fedora
30 Comments

There's a peculiar new bug affecting the soon-to-be-released Fedora 20 that could reveal a user's password when switching between users with the GNOME desktop.

On Fedora 20 right now with the default GNOME desktop if logging in as a user, switching to a different user, and then switch back to the original, and then locking the screen will end up showing the user's password as plain text if trying at that point to log-in as a different user. There also appears to be a few other ways to reproduce the user's password being displayed clearly on the screen and they all revolve around the GNOME lock-screen / user-switching. However, as not everyone does this sort of user-switching and some of the steps to reproduce may be rare, the bug's severity is still being determined.

The Fedora 20 early adopter that discovered this issue and then reported Red Hat Bug #1034031 and then let us know at Phoronix was James Patterson.

There's been many messages bouncing back and forth between James and Red Hat's Adam Williamson today to discuss the issue and its impact. James has been able to find a few different ways to make the log-in/lock screen confused where it displays the user's password. The issue has also been reproduced independently on other systems.

We'll see what happens to the bug in the next day or two and whether it will be deemed a blocker bug that could impact next month's release of Fedora 20.

Latest Linux Hardware Reviews
  1. ASUS AM1I-A: A Mini-ITX Board For Socketed Kabini APUs
  2. Mini-Box M350: A Simple, Affordable Mini-ITX Case
  3. Overclocking The AMD AM1 Athlon & Sempron APUs
  4. AMD Athlon 5350 / 5150 & Sempron 3850 / 2650
Latest Linux Articles
  1. Ubuntu 12.04.4 vs. 13.10 vs. 14.04 LTS Desktop Benchmarks
  2. AMD OpenCL Performance With AM1 Kabini APUs
  3. A Quick Look At GCC 4.9 vs. LLVM Clang 3.5
  4. Are AMD Athlon/Sempron APUs Fast Enough For Steam On Linux?
Latest Linux News
  1. The Improv ARM Board Still Isn't Shipping; Riding A Dead Horse?
  2. Debian To Maintain 6.0 Squeeze As An LTS Release
  3. Wasteland 2 Is Finally Released For Linux Gamers
  4. FreeBSD Advances For ARM, Bhyve, Clang
  5. Ubuntu 14.04 LTS "Trusty Tahr" Officially Released
  6. Ubuntu 12.04 LTS vs. 14.04 LTS Server Benchmarks
  7. QEMU 2.0 Released With ARM, x86 Enhancements
  8. Running The Unity 8 Preview Session On Ubuntu 14.04 LTS
  9. R600 Gallium3D Disables LLVM Back-End By Default
  10. Fedora 21 Gets GNOME 3.12, PHP 5.6, Mono 3.4
  11. Fedora Workstation Is Making Me Quite Excited
  12. Maynard: A Lightweight Wayland Desktop
Latest Forum Discussions
  1. The GNOME Foundation Is Running Short On Money
  2. Updated and Optimized Ubuntu Free Graphics Drivers
  3. Radeon 8000M problematic on Linux?
  4. Linux Kernel Developers Fed Up With Ridiculous Bugs In Systemd
  5. After Jack Keane, RuseSoft will briing Ankh 3 to Linux through Desura
  6. Suspected PHP Proxy Issue
  7. Change installation destination from home directory
  8. Bye bye BSD, Hello Linux: A Sys Admin's Story