Red Hat Bugzilla – Bug 475071
Security Risk in Login to Fedora 9
Last modified: 2015-01-14 18:22:14 EST
User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:184.108.40.206) Gecko/20081112 Fedora/1.1.13-1.fc9 SeaMonkey/1.1.13
In Fedora 9 the gnome login window shows a list of a set of users. This looks pretty, (you can I think put a photo of the person), but is in fact a high security risk.
The login consists of two things: the username and the password. The password is to be secret at all times. However, the username is half of the secret, if a hacker has the username, he/she can try to break the password.
There for this login window has a high security risk in it. At least you should be able to switch the showing of the list of users off.
In fedora 8, you could switch of this list of users, why has it disappeared ? It looks funny a list of photographs, but in many situations it is a security risk.
Steps to Reproduce:
*** This bug has been marked as a duplicate of bug 449728 ***