[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: password shown in asterisks (*)

From: Branko Čibej <brane_at_apache.org>
Date: Wed, 28 Oct 2015 20:08:16 +0100

On 28.10.2015 19:42, Sebastián Treu wrote:
> On Wed, Oct 28, 2015 at 12:44 PM, Stefan Sperling <stsp_at_elego.de> wrote:
>> On Wed, Oct 28, 2015 at 10:51:58AM -0300, Sebastián Treu wrote:
>>> Hi,
>>> This may be a dumb question, but today I realized that when doing a 'svn
>>> export' my typed password is shown in asterisk:
>>> Password for 'user': ******************
>>> This behaviour is new to me. Typed password invoking 'svn export' was
>>> supposed to not output any character.
>>> I was wondering if this have to do with svn or another thing like PAM
>>> modules or so... I was worried on having a corrupted svn binary after
>> some
>>> update.
>> I think this behaviour was introduced when issue #4280 ("prompt the
>> controlling
>> terminal, rather than stdin") was fixed:
>> https://issues.apache.org/jira/browse/SVN-4280
>> This change was made in SVN 1.8.0.
>> Did you recently upgrade to SVN 1.8 or 1.9 from SVN 1.7?
> Hey Stefan,
> Yes, version is 1.8. I googled before reaching the mailing list... I think
> I didn't search good enough for this topic.
> Thanks for pointing that out.

It's not "new" as such, but 1.8 behaves the same way on all platforms;
previously, some platforms would show asterisks whilst others would not.

The downside is that someone looking over your shoulder could guess the
length of your password. If that turns out to be an issue, we can easily
hide the echo.

-- Brane
Received on 2015-10-28 20:08:20 CET

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.