http://bugzilla.meego.com/show_bug.cgi?id=697 Summary: password shouldn't be visible when entering from command line Classification: MeeGo Projects Product: SyncEvolution Version: unspecified Platform: Netbook OS/Version: IA Status: ASSIGNED Severity: enhancement Priority: Low Component: SyncEvolution AssignedTo: syncevolution-bugs(a)meego.bugs ReportedBy: jingke.zhang(a)intel.com QAContact: jingke.zhang(a)intel.com CC: syncevolution-bugs(a)meego.bugs, syncevolution-default-bugs(a)meego.bugs Estimated Hours: 0.0 This is from http://bugzilla.moblin.org/show_bug.cgi?id=6671 Description From shuangeeer 2009-10-09 20:41:48 PST (-) [reply] If keyring is enabled, then user needs to enter password from command line for each sync. The password we entered is visible to the user himself/herself, others guys around, and also other tools like screenshot/script record. To improve the security, the password should not be visible from command line, as most linux distro do. ------- Comment #1 From pohly 2009-10-12 01:26:15 PST (-) [reply] ------- (In reply to comment #0) He or she should use the --keyring option to avoid this. This is not possible with the simple "getline()" style input method that we use at the moment. I don't think that the additional complexity is worth it. ------- Comment #2 From fmms 2010-01-03 16:32:37 PST (-) [reply] ------- Just wanted to report this: [fm@thinkpad ~]$ syncevolution google [INFO] todo: inactive [INFO] calendar: inactive [INFO] memo: inactive Enter password for SyncML server: If you do not hide, a little remark might help. "Attention: password will be visible" -- Configure bugmail: http://bugzilla.meego.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching the assignee of the bug. You are watching someone on the CC list of the bug.