-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 22/06/12 16:54, David Chadwick wrote: > Hi All > > I was demonstrating GPA for the first time to a class of students yesterday > and a very > strange thing happened. (Note that I am new to GPA, having used OpenPGP for > the last > 10 years, so I am not familiar with its "normal" behaviour). When I signed a > message in > the clipboard and was asked for my private key password, I typed it in, and > to my > horror saw that the password was displayed in the clear in another small > window at the > bottom left hand side of the screen, instead of showing as **** in the normal > password > window. The class thought this was very humorous. This small window then > disappeared > (without me doing anything). Later on in class I decided to change my > password, and > this time, when the new password screen appeared, and I typed in my new > password, and > it also appeared in a new small window, in the clear, at the bottom left hand > side of > the screen. Then it disappeared. > > Has anyone every come across anything like this before? > > I have tried to repeat this several times since the class, and am unable to. > My PC was > running very slowly at the time of the demo and I initially wondered if it > was a timing > issue. > > Otherwise I can only think that a very clever student in the class had hacked > into my > PC (which was connected to the wireless Internet the whole time) during the > lecture, > and had placed the key pop-up window ther braine on cue to capture my > passwords as I > typed. But this would seem to be a very difficult thing to do, and a very > clever > student > > regardst > > David >
Hello David, GPA on Linux has not done this - is it Windows? What other applications were running at the time? Perhaps one of them "captured" it - your passphrase? All I can think of is that you started a programme or a log-in that required a password - that programme was still running and captured your passphrase - but their are better brains then me :) David - -- https://linuxcounter.net/user/512854.html - http://gbenet.com/blog - cryptology - for books how-to's - mailing lists and more -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iQEcBAEBAgAGBQJP5JeYAAoJEOJpqm7flRExFY8H/2hR73oDIRNDTCkDimFB0BWi LrEnUSmseDNf5OGYOFZqyLnFvSEAz0/BnzvWfoQZWELmZJkeHvHTg9F1reatircU Ty7yRZvILtc8xnpvkKw06drcm4hQ9ZX5ReNgmX74ak3jTKUUorURP6FRKuCGI27y hC+8u/LXkYt4fUpJhbjGoFQvf9FGTqyVjJqtT+xnRc2bMGvcScdlpOjhaX3Z8krS FqRqkBSG4LnduhD3HBQj0MIWNnKcE+kttT8nrs9t+eYhD9xToEApG+D57YnnZH/V wKCMpFE/vdAm/vho6eHsUKQETyChoaZOvLVQkZF2zm4wJlhhTr3peRmTcM3URsM= =e/KO -----END PGP SIGNATURE----- _______________________________________________ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
