Language Selection

English French German Italian Portuguese Spanish

GNOME Cleartext Passwords: Bug or Feature?

Filed under
Software
Security

The current discussion in the Ubuntu forums is about a possible security hole in GNOME, specifically about GNOME registered users having their passwords appear as cleartext on the keyring. Not a bug, say its defenders, but the security concept behind the GNOME keyring.

In the discussion thread, the discoverer of the "blatant security flaw" gave an example of how it happens in Ubuntu 9.10. The user starts Ubuntu and registers on the desktop. The path through the Applications | Accessories | Passwords and Encryption Keyrings menus arrives at the keyring manager. Clicking on the Login folder shows the application processes and programs (including WLAN and mail accounts) and their respective passwords.

A right mouse click on an entry shows a context menu of properties, one of its tab being for keys. Clicking Password pops up a screen asking whether keyring access is allowed, for which no restrictions exist. The passphrase then appears and can be viewed as cleartext.

Rest Here




More in Tux Machines

Blackphone unveils a new phone and tablet running secure, encrypted Android

Today at Mobile World Congress, the encrypted phone system Blackphone announced a new phone and tablet, along with a new business focus on enterprise. The phone is called the Blackphone 2, a successor to the first Blackphone shown at MWC last year, but adds a new processor, better screen, and a larger profile overall. The tablet, called the Blackphone+, is slated for release in the fall. Both run Blackphone's secure OS, forked off of Android, which is designed to protect metadata and provide end-to-end encryption throughout. Read more

Oracle VirtualBox Updates to run on Linux 4.0 Kernel

The open-source VirtualBox virtualization project is out with its 4.3.24 update today providing a number of important updates and bug fixes. Read more

Qbo Is an AI-Driven Ubuntu-Powered Cute Little Robot - Video

We've seen some interesting devices coming out of the Mobile World Congress in Barcelona and the small Ubuntu-powered Qbo robot is just one them. Linux fans already kind of knew what to expected to see in Barcelona. Many Ubuntu fans were looking to check out the first Meizu MX4 Ubuntu Edition phone and their curiosity was satisfied, but now we have something that it's equally interesting, and that is a small robot. Read more

Ubuntu MATE Is One of the Last Major Distros to Officially Support PowerPC

Ubuntu MATE has been providing PowerPC support for some time now, but the developers have made some serious improvements to this particular feature in the latest 15.04 Beta 1 update. Read more