3 ms·
Good point, though I imagine that this issue could be fixed in SSH as long as the password is not being echoed (which it should not be).
by betterunix 13y ago
Good point, though I imagine that this issue could be fixed in SSH as long as the password is not being echoed (which it should not be).
- msmith 13y agoIronically, I think it's actually slightly easier for an eavesdropper to detect that your keystrokes are part of a password if the password is not being echoed. They could potentially use this information to know the length of a password, which would make brute-forcing easier. A very hypothetical attack, but fun to think about! Less effective than a $5 wrench, no doubt.