Ticket #1752 (new enhancement)

Opened 10 years ago

Last modified 10 years ago

[Qt-keypad] when enter the passwords, it will show up the numbers on the keypad

Reported by: wendy_hung Owned by: zecke
Priority: normal Milestone: Om2008.10
Component: Qtopia Version:
Severity: critical Keywords:
Cc: testing@…, marek@… Blocked By:
Blocking: Estimated Completion (week):
HasPatchForReview: PatchReviewResult:
Reproducible:

Description

kernel:20080723-asu.stable-uImage.bin
root file system:20080806-asu.stable-rootfs.jffs2

Summary:
when enter the passwords, it will show up the numbers on the keypad

Steps:
1) Launch the application that needs password, like WiFi? or SIM card pin number
2) Try to type the password
3) You can see the password numbers are show on the keypad

Expect:
Should be more secure.

Change History

comment:1 Changed 10 years ago by zecke

What would be more secure? What do we try to protect against?

comment:2 Changed 10 years ago by will

  • Cc marek@… added
  • Priority changed from high to normal
  • Type changed from defect to enhancement
  • Severity changed from major to normal

Marek and I sat down to discuss this and feel it is keep to the same rules of the existing keyboard without modifying it just so that we can hide what we are doing. Enhancement aat most, but not defect. Perhaps we try to improve it for 2009.9.

comment:3 follow-up: ↓ 5 Changed 10 years ago by zecke

XorA stated the obvious. When E_VIRTUAL_KEYBOARD_PASSWORD is set prediction should be turned off... and one could force the keyboard into a special mode. Only showing one char at a time...

comment:4 Changed 10 years ago by wendy_hung

  • Severity changed from normal to critical

comment:5 in reply to: ↑ 3 Changed 10 years ago by will

  • Milestone Om2008.8 deleted

Replying to zecke:

XorA stated the obvious. When E_VIRTUAL_KEYBOARD_PASSWORD is set prediction should be turned off... and one could force the keyboard into a special mode. Only showing one char at a time...

Sounds good to me.

comment:6 Changed 10 years ago by will

  • Milestone set to Om2008.9

comment:7 Changed 10 years ago by iknowjoseph

Please display password characters when entering them into the Openmoko. Password security can be provided by moving the phone so others can't see it; this is much easier than using a small keyboard to enter your passphrase when you can't see if you've made any mistakes.

comment:8 Changed 10 years ago by regina_kim

  • Milestone changed from Om2008.9 to Om2008.10
Note: See TracTickets for help on using tickets.