Password revelation

[Giorgos Keramidas]

On 2004-12-24 11:25, Mervin McDougall <mcd_advisory at yahoo.com> wrote:
> Here is something I noticed when installing freebsd 5.3 on my
> laptop. At the point where Freebsd asks whether you want to make any
> users and presents you with the screen where you can add users to your
> system during the installation process, I noticed that after entering
> the password...you can reveal the password by simply pressing the back
> arrow. I am not sure if that is true on all bsd installations but
> while installing 5.3 I noticed that though the keys were concealed
> with asterisks when typing , pressing the back arrow revealed the keys
> that were pressed and the password for the new user.

Ooops!  This sounds like a bug in the way sysinstall works.

Are you familiar with the Gnats database of FreeBSD problem reports?
I think you should file a bug report describing this.