Hiding password in wicd

Hi,
I recently installed wicd to manage wifi connections. It bothered me that the password becomes visible after clicking into the password field (properties window). Since i didn't found anything in in the wiki and the forum i searched a little further and found this post which helped me.
Now I would wish to know if I'm the only one who isn't happy with the password visible. Maybe a workaround like in the linked post could be added to the wicd wiki entry if there are more people who bother about this.
Cheers

I for one don't care and find it very convenient to look it up whenever a guest asks me for my router's key.
Note that the workaround above only works with the GTK frontend. A malicious user could still view the network key with wicd-curses. This can be patched too but then again you would need to change this on every Wicd upgrade. Is this worth the hassle? You decide.

Similar Messages

Hiding password in the script

Hi
Is there a way of hiding password text in the script? If possible please provide different ways of doing it and with examples. Thanks!

You can save encrypted data wherever you like, including within your script file (though there are certainly advantages to having it separate from the code.) One easy example of this is with the ConvertFrom-SecureString and ConvertTo-SecureString cmdlets:
# At your console:
$secret = Read-Host -AsSecureString "Enter password"
$secret | ConvertFrom-SecureString
# copy and paste the data that this command produces, and
# place it into your script file (or a data file, whatever)
# In your script:
$encryptedData = '<copied from ConvertFrom-SecureString output>'
$secureString = $encryptedData | ConvertTo-SecureString
When you call ConvertFrom-SecureString the way I did in this example, PowerShell uses the Windows Data Protection API (DPAPI) to perform the encryption. That's the scenario you described, where you're the only person who can decrypt the data, and only
on your own computer. In the examples code I linked to earlier, I show some alternatives using RSA certificates to encrypt data in a way that is just as secure, but can be shared across multiple users / computers.
wow.. a cool trick.. :) Thanks David for sharing this idea.
so for secure string it will only work on the machine where it was generated?
Every second counts..make use of it. Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.
IT Stuff Quick Bytes

Hiding Password in OIM user form

Hi All,
I am trying to Hide the userID and Password from OIM user (create user) form as I am using entity adaptor to generate these and I dont want to enter vague values. I am successful in hiding User ID field by modifying formMetaData.xml, however, I am not able to find anything for Password/Confirm Password fields.
Please suggest.

For each attribute reference, you can specify whether the field is:
Viewable—By adding the attribute reference to the relevant section
Editable—By specifying a value of TRUE or FALSE for the editable parameter
Optional—By specifying a value of TRUE or FALSE for the optional parameter

Hiding password in unix

Hi,
Could anyone tell me what is the unix command that is used for hiding the password's which is similar to following oracle code.
===============================================
accept uname prompt 'Enter username====>'
accept password prompt 'Enter passwd===>'hide
connect &username/&passwd
===============================================
I need the similar type of functionality(hide) in unix.
Regards,
Nagarjun.

I need the similar type of functionality(hide) in unix.If I understand your need, then you can use "stty -echo". See this example :
[ora102 work db102]$ cat read_pass.sh
echo -n "Password : "
read PASS
echo $PASS >/tmp/pass.txt
[ora102 work db102]$ ./read_pass.sh
Password : mypass
[ora102 work db102]$ cat /tmp/pass.txt
mypass
[ora102 work db102]$ Now I use stty -echo
[ora102 work db102]$ cat read_pass.sh
echo -n "Password : "
stty -echo
read PASS
stty echo; echo
echo $PASS >/tmp/pass.txt
[ora102 work db102]$ ./read_pass.sh
Password :
[ora102 work db102]$ cat /tmp/pass.txt
mypass
[ora102 work db102]$

Hiding password on the connection string

Hi,
Am trying to see if it is possible to hide password on the connection string when connecting from the application server. I can see one way of doing this, that is to use Oracle's OS Authentication. But because my Oracle is installed on Unix and my application server is on Windows 2000. I am not sure if this is possible?
Has any done something similar before?
Thanks

The problem with using a single sign-in product like Kerberos is I believe the Advanced Security Option is required. The ASO is an additional license fee.
Having the password in a file does not have to be a major security problem. Have a set of common logon modules created, one for each language in use, and have the module contain the logic to fetch the key.
This way the file name and path to the key is not obvious. Then have the premissions set so that only the ID that runs the production batch can read the file. Neither the customers or the developers should have access to that ID.
Unfortunately while this works for works batch ran out of products like Unicenter and application server based applications this technique does not work very well for cleint server applications. Client server based applications really need every user to have to sign-in with their own id.
If every user does not have their own id and it is undesirable to hard code the userid/password into the application then you are back to getting the password from an unsecured external source. Having the common module to do the fetching at least makes someone work to find the ID/password. Any Id used in this manner should have limited access in the database which means you might have two, three, or more such ID's setup but with each having access to the tables behind only specific applications.
HTH -- Mark D Powell --

Hiding password in debug

Hi folks !
I have a question here, how could hide a parameter typed in a password, so this is not visible in debug mode?
Is this possible?
Thanks for help.

Hi Martin,
Thanks for your explanation.
I imagined it was possible to create a validation when it was typed value (As i done in Java with key press event)
Thanks anyway.

Hiding Password in URL

I have the url's to the reports embedded in our entranet web page. The problem is anyone can do a view source and see passwords. How can i hide those userid's and passwords??

If hexadecimal encription of url is good enough protection for your business you can apply it. If it isn't, you have to use the RUN_REPORT_OBJECT built-in that is used to call reports from the forms. URL is hidden because passing usernames and password is implicit between forms and reports. If you are interested in details you can read the white papers on forms-reports integration.
Ask again if you don't understand something, I will be happy to answer because I spent a lot of time on this problem. Regards,
er.

About hiding password in monitor

Hi All¨
I am sending a user password from sap system to a third party system via XI , I do not want anyone to se the password in the monitor , how can I hide it.
thanks in advance.

Hi,
You could use the SAML based Principal propagation concept for this kind of activity.
But you need to use either RFC, proxy or SOAP adapter only.
It will create SAP Assertion ticket as per the User ID and Password the login User ID and Password that will be of SAP side.
Principal propagation means the ability to forward the user context of a message unchanged from the sender to the receiver.
the message is executed under the same user in all participating messaging components.
In such ..
Users to be propagated must be maintained in the messaging components with the same name as in the sender system. For security reasons, we recommend that you create these users as users of type system and not as dialog users. These users must be assigned the role SAP_XI_APPL_SERV_USER.
If you use access control lists (ACLs) for messages with specified sender systems or interfaces (see SAP Note 852237), these ACLs must include propagated application users if principal propagation is applied.
I hope the below links are useful..
refer
Principal Propagation in SAP XI
/people/alexander.bundschuh/blog/2007/01/16/principal-propagation-in-sap-xi
Principal Propagation with SAP NetWeaver Process Integration 7.1
/people/alexander.bundschuh/blog/2007/08/06/principal-propagation-with-sap-netweaver-process-integration-71
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/808d3048-638c-2a10-35a6-faa48e50ad59
http://help.sap.com/saphelp_nw04/helpdata/en/45/0f16bef65c7249e10000000a155369/frameset.htm
http://help.sap.com/saphelp_nw04s/helpdata/en/45/345d11a7993446e10000000a155369/frameset.htm
/people/alexander.bundschuh/blog/2007/08/06/principal-propagation-with-sap-netweaver-process-integration-71
Thanks
Swarup
Edited by: Swarup Sawant on Apr 9, 2008 12:37 PM
Edited by: Swarup Sawant on Apr 9, 2008 12:38 PM

Hiding password in command line

Hi,
I am really new to java. Need some way to not display password on screen as the user enters it. Can it be done without creating text field?
thanx
Divya

This can't be done on the console in java. You need to use a GUI or JNI. Check out the last post from armalcolm on this thread for the JNI solution.
http://forum.java.sun.com/thread.jsp?forum=4&thread=195678

Hiding passwords behind **** in command line.

Hi,
I am coding a program that needs a password, and I want to hide it but I just can't find the proper way. I've tried jline to no avail, I couldn't get it to work. Any ideas on ways to hide a password behind ****?
Thanks, bto.

Check out the console class http://java.sun.com/javase/6/docs/api/java/io/Console.html#readPassword()
I've not used it but readPassword should do what you want.

ABAP Debugger: hiding password field value

Hi to all !!
I'm using a screen with password type field. Is there a way to prevent to see what this field contains in debugger?? I don't want smart users with ABAP skills to play with it and see the password.
Thanks,
Yuval at Cellcom.

Hi Yuval,
If your user could debug the screen, he will show his password. Not the password of other users.
Frédéric

Hiding password in MaxL output log

On Win2K platform, I have a MaxL script that accepts 2 parameters and performs some actions.I invoke the script using a batch file in the following format:ESSMSH C:\scripts\Script1.msh AdminID passwordThe Maxl script sends all activity to a log file which is then automatically e-mailed to end users.The problem I have is that the log file contains the AdminID and password that was used in the MaxL script. I need all activity in the log because I automatically scan the log for errors.Is there a way using some of the available MaxL Shell Invocation flags that will perfrom the same action but hide the password from showing up in the log?Regards,Tom M.Essbase 6.5.4

We just upgraded to Essbase 7.1.3. Due to security concern, our security auditor is concern we even see the password in the Malx output log. Even we try to doa grep -v or sed -e on the password line to replace the old log, there is still a good window long enough to people to see it. I tried spool and set message level, but none of them hides the login statement display. I also tried to use shell escape feature to run old ESSCMD login with MaxL, but couldn't get it to work. I was wondering if anyone who may have a new solution to this problem that can fix it on the fly other than fix it after the entire process is complete. Essbase really should consider provide an option to hide the password in the output logic, or pad it with XXXXXXXXX.

Wrong Xorg resolution+wicd error.

Hey fellas.
I'm kidna new in arch. I got my system up and running with kde 4.3
but yet I'm having a few issues.
1. The system doesn't detect the correct screen resolution. it's a 1280x800 screen toshiba laptop with intel X4500mhd.
I've tried tweaking xorg.conf. it didn't help much so I'm attaching xorg.conf
the system sets the resolution by default to 1024x768.
2. I configured wicd to start automatically with kde (was this the right way to do it? just adding it to the startup applications?) but yet, everytime the X starts the system asks me for a root password for wicd. even after i enter it the X throws a message that it can't connect to wicd's D-bus. how can these issues be solved?
Thanks!
Section "ServerLayout"
Identifier "X.org Configured"
Screen 0 "Screen0" 0 0
InputDevice "Mouse0" "CorePointer"
InputDevice "Keyboard0" "CoreKeyboard"
EndSection
Section "Files"
ModulePath "/usr/lib/xorg/modules"
FontPath "/usr/share/fonts/misc"
FontPath "/usr/share/fonts/100dpi:unscaled"
FontPath "/usr/share/fonts/75dpi:unscaled"
FontPath "/usr/share/fonts/TTF"
FontPath "/usr/share/fonts/Type1"
EndSection
Section "Module"
Load "dri"
Load "record"
Load "dri2"
Load "glx"
Load "dbe"
Load "extmod"
Load "synaptics"
EndSection
Section "InputDevice"
Identifier "Keyboard0"
Driver "kbd"
EndSection
Section "Module"
Load "dri"
Load "record"
Load "dri2"
Load "glx"
Load "dbe"
Load "extmod"
Load "synaptics"
EndSection
Section "InputDevice"
Identifier "Keyboard0"
Driver "kbd"
EndSection
Section "InputDevice"
Identifier "Mouse0"
Driver "mouse"
Option "Protocol" "auto"
Option "Device" "/dev/input/mice"
Option "ZAxisMapping" "4 5 6 7"
EndSection
Section "Monitor"
Identifier "Monitor0"
VendorName "Monitor Vendor"
ModelName "Monitor Model"
Modeline "1280x800_60.00" 83.50 1280 1352 1480 1680 800 803 809 831 -hsync +vsync
Option "PreferredMode" "1280x800"
EndSection
Section "Device"
### Available Driver options are:-
### Values: : integer, <f>: float, <bool>: "True"/"False",
### <string>: "String", <freq>: "<f> Hz/kHz/MHz"
### [arg]: arg optional
#Option "ShadowFB" # [<bool>]
#Option "DefaultRefresh" # [<bool>]
#Option "ModeSetClearScreen" # [<bool>]
Identifier "Card0"
Driver "vesa"
VendorName "Intel Corporation"
BoardName "Mobile 4 Series Chipset Integrated Graphics Controller"
BusID "PCI:0:2:0"
EndSection
Section "Screen"
Identifier "Screen0"
Device "Card0"
Monitor "Monitor0"
DefaultDepth 24
SubSection "Display"
Depth 24
Modes "1280x800"
EndSubSection
EndSection
Last edited by ohadbasan (2009-08-19 00:29:11)

Wow.
you people are fast.
Ashren - your solution solved the resolution problem. many thanks. I was sure that the intel driver is built in the kernel therefore no need to d/l it manually.
ludovico - I didn't know that wicd is a daemon. thought it just an application. so as you said I added it to rc.conf and now everything works great.
can you guys plz direct me to some good documentation? I hate asking stupid questions.
thanks!

Passwords not totally hidden in new iPod Touch 2.0 software - BE CAUTIOUS

While using my iPod Touch with the new 2.0 software installed I noticed that there is a lag in the software for hiding passwords. When I type in an input field for a password you can see the character or number that I'm typing for a second OR TWO! Then it changes to the dot that we associate with a password input field. NOT good!

That doesn't make sense and doesn't follow the current web standards for UI interaction. It's a password field so I would expect that what I'm typing to be hidden. That's the whole idea of a password.

Hide recovery catalog password in script

hello all,
i wanted to find out what are all the options the community uses when it comes to hiding password for the recovery catalog owner?? obviously when backing up other DB in our environment we use the recovery catalog and connect to it using user/password@recovery_catalog in our script. so if someone have access to read our script can find out the password for the recovery catalog owner. I wanted to see what dose rest of the community dose to hide the recovery catalog password?

What's the db version that we are discussing here? If its 11g, you can create the virtual catalog owners on top of the catalog and use that to manage your db. Other than that, you may want to store the password in the wallet at the client side and use it without hard-coding it .
http://www.oracle-base.com/articles/10g/secure-external-password-store-10gr2.php
Aman....

Hiding password in wicd

Similar Messages

Maybe you are looking for