Idea #6975: Extra characters in entered password do not invalidate login

-64

Written by nilium the 14 Apr 08 at 06:02. Category: Security.
Related to: Nothing/Others. Status: New

Description

Ever had to log into ubuntu while somebody is watching you type your password? It would be great to be able to type extra characters before and/or after the correct password string and still work. For instance, say the password is "orange" then typing "ABCorangeDEFH" or "uorange232j" would work just as well as typing simply "orange."

Tags: (none)

Attachments

No attachments.

Duplicates

[Report a duplicate and merge its votes to this idea]

Comments

CyberKiller wrote on the 14 Apr 08 at 06:41

This way if someone watching would memorize the "ABCorangeDEFH", he would also be able to logn using that. -1

steve196 wrote on the 14 Apr 08 at 08:56

1) How do you do that? The computer does not know the password, only its hash value and i have no idea, how to do this with a hash.
2) How often does it happen to you that you accidentally type stuff before and after the password??

revzoe wrote on the 18 Apr 08 at 06:54

this is not possible with a hash. If it could be done, there would be no point having the hash.

3wings wrote on the 23 Apr 08 at 22:26

Try instead to type extra chars and remove them with backspace / delete :)

Manos wrote on the 11 May 08 at 21:08

@nilium
If you want your idea to succeed, you have to give solution(s) to the problem.
Ideas like these always get demoted.
I recommend starting a new idea and giving at least 2 solutions.

The only way that I can think of to do this, is to hold down a key while typing.
For Example, hold Ctrl while typing the extra characters.
It shows the *s, but ignores the characters.

nokvetching wrote on the 21 Jun 08 at 16:31

You could carry a knife and/or give people the eye of doom when they try to watch you type in your password. This is a wetware problem, not a software problem.

Post your comment