https://bugs.kde.org/show_bug.cgi?id=147873
kil...@kilrae.ca changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |kil...@kilrae.ca --- Comment #22 from kil...@kilrae.ca --- (In reply to michaelk83 from comment #21) > Some of this has been said before, but see Bug 450004 comment 4, for those > who are still concerned. > TL;DR: Just hiding the passwords visually adds little real security (see the > linked comment for details). There are better solutions, but as always, it's > a trade-off between security and convenience. > > I would agree that changing the master password should require re-entry of > the current one. I just don’t understand this attitude. The fact that a person can bypass most UI-based security with some effort and access to an unlocked system isn’t a good reason to forgo all such security. I lock my car at night even though a thief could easily break the window or open the door with a coat hanger. The odds are better that the person you let use your computer to check their email is mildly nosy than really motivated. I left comment #2 in 2007. I have a little experience with Linux. But I couldn’t pull off any of these “trivial exploits” without some time to think about it. However, I can click “Show Passwords” with the best of them (as can the worst of them). -- You are receiving this mail because: You are watching all bug changes.