[Bug 672285]

2012-11-02 Thread Jamie Strandboge
hentication dialogs use plain text spoken password with screen- reader To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/policykit-gnome/+bug/672285/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 672285] Re: Authentication dialogs use plain text spoken password with screen-reader

2010-11-29 Thread Brian Murray
** Also affects: policykit-gnome (Ubuntu Natty) Importance: Medium Status: Triaged -- Authentication dialogs use plain text spoken password with screen-reader https://bugs.launchpad.net/bugs/672285 You received this bug notification because you are a member of Ubuntu Bugs, which is a di

[Bug 672285] Re: Authentication dialogs use plain text spoken password with screen-reader

2010-11-19 Thread Milan Bouchet-Valat
So these dialogs are indeed the same, from the same process, which is what I expected. I really can't tell why Orca would treat them differently... One would need to know how this works, and what may happen in polkit-gnome-authentication-agent-1 that would change Orca's behavior. But I can't help i

[Bug 672285] Re: Authentication dialogs use plain text spoken password with screen-reader

2010-11-19 Thread Charlie Kravetz
** Attachment added: "xprop from update-manager" https://bugs.launchpad.net/ubuntu/+source/policykit-gnome/+bug/672285/+attachment/1738713/+files/xprop_update-manager -- Authentication dialogs use plain text spoken password with screen-reader https://bugs.launchpad.net/bugs/

[Bug 672285] Re: Authentication dialogs use plain text spoken password with screen-reader

2010-11-19 Thread Charlie Kravetz
PID(CARDINAL) = 1289 I am attaching both results as separate files. ** Attachment added: "xprop from Users and Groups" https://bugs.launchpad.net/ubuntu/+source/policykit-gnome/+bug/672285/+attachment/1738712/+files/xprop_Users_and_Groups -- Authentication dialogs use plain te

[Bug 672285] Re: Authentication dialogs use plain text spoken password with screen-reader

2010-11-19 Thread Milan Bouchet-Valat
Explain what exactly? xprop is easy, just run 'xprop' and click on the offending dialog to get the results on the console. -- Authentication dialogs use plain text spoken password with screen-reader https://bugs.launchpad.net/bugs/672285 You received this bug notification because you are a member

[Bug 672285] Re: Authentication dialogs use plain text spoken password with screen-reader

2010-11-19 Thread Charlie Kravetz
You have to explain how to do this now. I can tell you the people in the room repeated my password back to me when authenticating Users and Groups. The rest of the passwords were "asterisk asterisk asterisk" and that got repeated too. -- Authentication dialogs use plain text spoken password with

[Bug 672285] Re: Authentication dialogs use plain text spoken password with screen-reader

2010-11-19 Thread Milan Bouchet-Valat
And you can swear me the dialog from users-admin is not behaving the same as others?! The only thing users-admin does is asking the backends (so it doesn't even do it by itself) to ask PolicyKit1 to authenticate by whatever means are adequate. So this amounts to "pkcheck --action-id org.freedesktop

[Bug 672285] Re: Authentication dialogs use plain text spoken password with screen-reader

2010-11-19 Thread Charlie Kravetz
The password echoed as asterisk, the reponses are the same except the last character: pkcheck --action-id org.debian.apt.upgrade-packages --allow-user- interaction --process $PID response: polkit/56temporary_authorization_id=tmpauthz0 pkcheck --action-id org.freedesktop.systemtoolsbackends.set -

[Bug 672285] Re: Authentication dialogs use plain text spoken password with screen-reader

2010-11-19 Thread Milan Bouchet-Valat
Weird. Both use PolicyKit. What if you run export PID=`pidof gnome-settings-daemon` pkcheck --action-id org.debian.apt.upgrade-packages --allow-user-interaction --process $PID pkcheck --action-id org.freedesktop.systemtoolsbackends.set --allow-user-interaction --process $PID Is there a differenc

[Bug 672285] Re: Authentication dialogs use plain text spoken password with screen-reader

2010-11-19 Thread Charlie Kravetz
If I run update-manager, the password is asterisks. That is, updating using update-manager. -- Authentication dialogs use plain text spoken password with screen-reader https://bugs.launchpad.net/bugs/672285 You received this bug notification because you are a member of Ubuntu Bugs, which is a dir

[Bug 672285] Re: Authentication dialogs use plain text spoken password with screen-reader

2010-11-19 Thread Milan Bouchet-Valat
None of the examples you cite are using PolicyKit actually. Try setting a system connection using NetworkManager config tool for example, or installing packages using updates-manager. -- Authentication dialogs use plain text spoken password with screen-reader https://bugs.launchpad.net/bugs/67228

[Bug 672285] Re: Authentication dialogs use plain text spoken password with screen-reader

2010-11-19 Thread Charlie Kravetz
The above is incorrect. If I use gksu nautilus, the password is spoken as asterisks, if I use sudo in a terminal, the password is asterisks, if I login, the password is asterisks. If I run update-manager, the password is asterisks. The only instance I have found that echoes the password in clear la

[Bug 672285] Re: Users and Groups/Add uses plain text spoken password with screen-reader

2010-11-19 Thread Milan Bouchet-Valat
users-admin knows nothing about this authentication dialog, it's run by PolicyKit-gnome. So the bug must affect all dialogs. You should report this to upstream if you really want it to be fixed. ** Package changed: gnome-system-tools (Ubuntu) => policykit-gnome (Ubuntu) ** Changed in: policykit-

[Bug 672285] Re: Users and Groups/Add uses plain text spoken password with screen-reader

2010-11-19 Thread Marc Deslauriers
Thanks for reporting this issue. Do any other policykit dialogs echo your password? ** Visibility changed to: Public -- Users and Groups/Add uses plain text spoken password with screen-reader https://bugs.launchpad.net/bugs/672285 You received this bug notification because you are a member of Ub

[Bug 672285] [NEW] Users and Groups/Add uses plain text spoken password with screen-reader

2010-11-19 Thread Launchpad Bug Tracker
*** This bug is a security vulnerability *** You have been subscribed to a public security bug by Marc Deslauriers (mdeslaur): Binary package hint: gnome-system-tools Maverick 10.10 final version, upgraded from Ubuntu 10.04 on 2010-11-07. If I select System -> Administration -> Users and Groups