Ubuntu's Server Installer Was Mistakenly Leaking Encrypted Storage Passphrase To Its Log

[phoronix]

Phoronix: Ubuntu's Server Installer Was Mistakenly Leaking Encrypted Storage Passphrase To Its Log

With the recently released Ubuntu 20.04 LTS, the Ubuntu Server installer exclusively uses the "Subiquity" installer that Canonical has been working on in recent years in moving away from the classic Debian Installer. Unfortunately a security issue crept into Subiquity that has now been resolved...

http://www.phoronix.com/scan.php?page=news_item&px=Ubuntu-Subiquity-LVM-Pass-Bug

[SWY1985]

I think mistakes like these are the result of deadlines being put on software releases, instead of releasing 'when it's finished'.

[MrEcho]

Software and systems are never finished.

[tildearrow]

Are you kidding me?

[ix900]

Its the human element. Stuff happens. You could debug it for 20 years and something could all of a sudden show up in year 21.

[Slartifartblast]

Software and systems are never finished.

And unsinkable

[SWY1985]

Bugs happen, it's inevitable... what I meant to say was that deadlines on software releases cause preventable bugs to slip through. It lowers the quality of the code because 'we need it to be finished today'. That's how and slip ups like this happen.

I've seen it happen too many times: Timed releases cause an increase in bug fix updates afterwards.

[StarterX4]

*Oops*

[Britoid]

I'm actually shocked it didn't send it off to Amazon as well.

[CochainComplex]

I'm actually shocked it didn't send it off to Amazon as well.

It still does. But since it is intentionally there's no but to fix