Back To Website Security

Should Password Masking be eliminated ?

  • Bogey
  • Bogey
  • Genius
  • User avatar
  • Joined: Jul 14, 2005
  • Posts: 8211
  • Loc: USA
  • Status: Offline

Post July 7th, 2009, 1:06 pm

spork wrote:
The problem with Joe's idea is that designers will neglect to set the z-index correctly for the check box, and I'll end up tabbing to what I think is the "keep me logged in" box, hitting space, and revealing my password to the masses.

Actually, Joebert's example is a one-way thing. It starts as unmasked, but if you click the mask button, it would mask the password and disable to masking button... no way to unmask the password after masking it using that button... so that shouldn't be the problem.
"Bring forth therefore fruits meet for repentance:" Matthew 3:8
  • Anonymous
  • Bot
  • No Avatar
  • Joined: 25 Feb 2008
  • Posts: ?
  • Loc: Ozzuland
  • Status: Online

Post July 7th, 2009, 1:06 pm

  • Rabid Dog
  • Web Master
  • Web Master
  • User avatar
  • Joined: May 21, 2004
  • Posts: 3229
  • Loc: South Africa
  • Status: Offline

Post July 7th, 2009, 1:45 pm

spork wrote:
The problem with Joe's idea is that designers will neglect to set the z-index correctly for the check box, and I'll end up tabbing to what I think is the "keep me logged in" box, hitting space, and revealing my password to the masses.


Stop using you keyboard and use your mouse! :D
Watch me grow
  • joebert
  • Sledgehammer
  • Genius
  • No Avatar
  • Joined: Feb 10, 2004
  • Posts: 13455
  • Loc: Florida
  • Status: Offline

Post July 8th, 2009, 12:47 am

Here's a little bit spiffier version of what I attached before with a few more considerations built into it.
It takes the form shown as "default" and enhances it if JS is available. :D

It unzips to a folder named "spiffy-login" that contains "index.html" and "dialog.png".

Attachments:
spiffy-login.gif
Attachments:
spiffy-login.zip

(5.49 KiB) Downloaded 161 times

Updated July 9th; fixed issue where clicking password field triggered the masking button.

Strong with this one, the sudo is.
  • Rabid Dog
  • Web Master
  • Web Master
  • User avatar
  • Joined: May 21, 2004
  • Posts: 3229
  • Loc: South Africa
  • Status: Offline

Post July 8th, 2009, 2:52 am

Nice!
Watch me grow
  • Bogey
  • Bogey
  • Genius
  • User avatar
  • Joined: Jul 14, 2005
  • Posts: 8211
  • Loc: USA
  • Status: Offline

Post July 8th, 2009, 12:08 pm

If I click on the password input, it automatically presses 'Mask Password'. Is it supposed to do that?
"Bring forth therefore fruits meet for repentance:" Matthew 3:8
  • joebert
  • Sledgehammer
  • Genius
  • No Avatar
  • Joined: Feb 10, 2004
  • Posts: 13455
  • Loc: Florida
  • Status: Offline

Post July 8th, 2009, 8:27 pm

Hrm. Not sure why it does that. :scratchhead:

I accidentally threw my keyboard through my window today and this backup flexible keyboard is a pain to type with. I'll take a look at it tomorrow when I get back from night fishing and the computer stores are open. :D
Strong with this one, the sudo is.
  • Bogey
  • Bogey
  • Genius
  • User avatar
  • Joined: Jul 14, 2005
  • Posts: 8211
  • Loc: USA
  • Status: Offline

Post July 8th, 2009, 8:33 pm

joebert wrote:
Hrm. Not sure why it does that. :scratchhead:

I accidentally threw my keyboard through my window today and this backup flexible keyboard is a pain to type with. I'll take a look at it tomorrow when I get back from night fishing and the computer stores are open. :D
:lol: are you serious? Or is that an excuse?
"Bring forth therefore fruits meet for repentance:" Matthew 3:8
  • Rabid Dog
  • Web Master
  • Web Master
  • User avatar
  • Joined: May 21, 2004
  • Posts: 3229
  • Loc: South Africa
  • Status: Offline

Post July 9th, 2009, 12:00 am

"Accidently threw my keyboard"

The mind boggles how this happened accidently

*Keyboard in hind, la la la la, dancing with my keyboard, la la la, WHOOOPS!*
Watch me grow
  • Bogey
  • Bogey
  • Genius
  • User avatar
  • Joined: Jul 14, 2005
  • Posts: 8211
  • Loc: USA
  • Status: Offline

Post July 9th, 2009, 12:04 am

Rabid Dog wrote:
"Accidently threw my keyboard"

The mind boggles how this happened accidently

*Keyboard in hind, la la la la, dancing with my keyboard, la la la, WHOOOPS!*

LOL :lol: That was awesome!
"Bring forth therefore fruits meet for repentance:" Matthew 3:8
  • joebert
  • Sledgehammer
  • Genius
  • No Avatar
  • Joined: Feb 10, 2004
  • Posts: 13455
  • Loc: Florida
  • Status: Offline

Post July 9th, 2009, 4:03 am

Found the issue. When I was attaching the masker button, I was inserting it right before the password field, which happened to be within a <label> element. Attaching it before the password fields parent element fixed it. I updated the post with the new attachment.
Strong with this one, the sudo is.
  • UPSGuy
  • Lurker ಠ_ಠ
  • Web Master
  • User avatar
  • Joined: Jul 25, 2005
  • Posts: 2735
  • Loc: Nashville, TN
  • Status: Offline

Post July 9th, 2009, 5:39 am

Quote:
I accidentally threw my keyboard through my window today and this backup flexible keyboard is a pain to type with.


Hrmm, that goes a long way towards explaining why I got ribbed so hard over the email thing. I got the feeling something must be bothering you yesterday, but I didn't want to turn it on me (unless I was the root cause, heh).
I'd love to change the world, but they won't give me the source code.

1, 2, 3

Post Information

  • Total Posts in this topic: 41 posts
  • Users browsing this forum: No registered users and 3 guests
  • You cannot post new topics in this forum
  • You cannot reply to topics in this forum
  • You cannot edit your posts in this forum
  • You cannot delete your posts in this forum
  • You cannot post attachments in this forum
 
 

© 2011 Unmelted, LLC. Ozzu® is a registered trademark of Unmelted, LLC.