Jim Salter on Nostr: Installed Ubuntu 26.04 for the first time. Logged into a TTY. me@box:~$ sudo-s ...
Installed Ubuntu 26.04 for the first time.
Logged into a TTY.
me@box:~$ sudo-s
Password: ********************
EXCUSE ME--ASTERISKS? WTF?
Look, obviously I appreciate that seeing the character count as you type makes it easier. But this is supposed to be suitable for high security environments. And making it easy to see the character count is a significant entropy leak.
This should not be the default configuration, particularly in Ubuntu *server* (which is what I installed). DISAPPROVE.
Published at
2026-04-27 16:35:39 CESTEvent JSON
{
"id": "c76471bdc0f72686605b0e1c4af2a3a8b8f2540e60fa81016e38a9f3ed713356",
"pubkey": "68063bb7cab3b554c31388dc6de6c2488b7416d8a676d320e86a020eea53962d",
"created_at": 1777300539,
"kind": 1,
"tags": [
[
"proxy",
"https://fosstodon.org/@jimsalter/116477168141410349",
"web"
],
[
"proxy",
"https://fosstodon.org/users/jimsalter/statuses/116477168141410349",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://fosstodon.org/users/jimsalter/statuses/116477168141410349",
"pink.momostr"
],
[
"-"
]
],
"content": "Installed Ubuntu 26.04 for the first time. \n\nLogged into a TTY.\n\nme@box:~$ sudo-s\nPassword: ********************\n\nEXCUSE ME--ASTERISKS? WTF?\n\nLook, obviously I appreciate that seeing the character count as you type makes it easier. But this is supposed to be suitable for high security environments. And making it easy to see the character count is a significant entropy leak. \n\nThis should not be the default configuration, particularly in Ubuntu *server* (which is what I installed). DISAPPROVE.",
"sig": "311d5b00b3bef1bb663278101099de3a187d5d7901f679fc412ebcabbc7bf58e61aeb71f23cbe84fe861ce32871de5f60546be0741f73c39a4a7e0d7e32a357f"
}
