Why does GNOME take so much time to tell that a screensaver-introduced password is erroneous?
in [Debian]
|
Prev: skuteczne zarządzanie projektami
Next: Administrating wview on a meteorologically-dedicated computer: tips / advices?
From: Merciadri Luca on 21 Jun 2010 17:40 Hi, I use GNOME. I have noticed that if I type some erroneous password to leave the screensaver mode, GNOME takes ~3 or 4 secs. to tell me that it is erroneous. If I type the correct password, I am directly sent in my session. Why does it take so much time to tell me that a password is erroneous? I can even know if I made a typo by looking at how much time it takes! Thanks. -- Merciadri Luca See http://www.student.montefiore.ulg.ac.be/~merciadri/ I use PGP. If there is an incompatibility problem with your mail client, please contact me. Nothing in life is to be feared; it is only to be understood. (Marie Curie)
From: Ron Johnson on 21 Jun 2010 18:10
On 06/21/2010 04:47 PM, Celejar wrote: > On Mon, 21 Jun 2010 23:35:37 +0200 > Merciadri Luca<Luca.Merciadri(a)student.ulg.ac.be> wrote: > >> Hi, >> >> I use GNOME. >> >> I have noticed that if I type some erroneous password to leave the >> screensaver mode, GNOME takes ~3 or 4 secs. to tell me that it is >> erroneous. If I type the correct password, I am directly sent in my >> session. Why does it take so much time to tell me that a password is >> erroneous? I can even know if I made a typo by looking at how much time >> it takes! > > Same thing with xscreensaver. I think that a lot of software that asks > for a password behaves like this, perhaps to prevent brute-forcing? > I'm not sure if brute-forcing is possible on a GUI, though. > Since I notice the same issue when logging in from the console, could it be a problem with libpam? -- Seek truth from facts. -- To UNSUBSCRIBE, email to debian-user-REQUEST(a)lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmaster(a)lists.debian.org Archive: http://lists.debian.org/4C1FE2A5.9010402(a)cox.net |