[BlueOnyx:03836] Re: GUI shows mysql passwords in clear

Menno Jansz menno at jansz.com
Thu Mar 4 14:12:06 -05 2010


That is a good solution :)

But whilst us server admins know to protect these screens from prying 
eyes, how
many customers will be in an internet cafe editing their sites? And they
probably use the same password for mysql as their admin account...

It may be better to only show these passwords in the GUI when specifically
requested using a pop up link or some ajax.

Cheers,
Menno
-- 
www.jansz.com


Quoting Jeff Jones <jeffrhysjones at mac.com> on Thu, 04 Mar 2010:

> Here is my solution:
>
> I would invest in a square meter of black cloth that you can attach 
> to the back of your laptop screen.
>
> When you need to use BX in 'secure mode' , unfold the cloth, get your 
> head under it so you and your laptop are completely under cover. 
> Using your iphone as a torch, find your way to to the right keys to 
> log in to BX.
>
> Now you can view web passwords in a completely secure manner.
>
> This solution protects not only passwords in BX, but also passwords 
> for your laptop.
>
> And you can also use it to view websites in private that you don't 
> want other people knowing about.
>
> Jeff
>
> On 4 Mar 2010, at 17:43, Michael Stauber wrote:
>
>> Hi Menno,
>>
>>> One thing that probably would be good to not do is show the password in
>>> clear text on the Web Settings screen for a site.
>>
>> Well, only siteAdmin's and server admins can see that page (and the 
>> password).
>> The siteAdmin (i.e.: end user responsible for the sites 
>> administration) should
>> be able to see it, because it eases the support overhead of the 
>> server admin.
>> Cuz then he has to reset the password less often just because the client
>> forgot it again. ;o)
>>
>> --
>> With best regards
>>
>> Michael Stauber
>>
>> _______________________________________________
>> Blueonyx mailing list
>> Blueonyx at blueonyx.it
>> http://www.blueonyx.it/mailman/listinfo/blueonyx
>
> _______________________________________________
> Blueonyx mailing list
> Blueonyx at blueonyx.it
> http://www.blueonyx.it/mailman/listinfo/blueonyx
>






More information about the Blueonyx mailing list