LinuxQuestions.org
Help answer threads with 0 replies.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 04-27-2015, 04:39 AM   #1
Lop3
Member
 
Registered: Aug 2013
Posts: 48

Rep: Reputation: Disabled
Question Suggestions for entering passwords on your laptop in a public place


Often I've been at conferences sitting near the back and the speaker is a bit boring, some people were using their laptops. I took out my laptop, but then I realized I needed to type my password, surrounded by loads of people.

Or a more common situation, you're at a coffee shop, on a plane/bus/train.

The problem is it's not just one password. It's password after password. Every SSH connection, every encrypted filesystem etc etc. Sudo in this terminal window, sudo in that terminal window.
I would have to do some kind of yoga posture every time to conceal my password and that would REALLY draw attention to myself.

I recall hearing about Julian Assange putting a red hood over his head to type in his passwords. It actually doesn't seem like a bad idea.
It's funny, when I googled password hood on google images, nothing came up.

Which makes me wonder? What practical solutions are there?

These are the two good solutions I've thought of:
1. Password hood (like Julian assange)
2. Learn to use a dvorak keyboard (without changing the stickers on your letters) (this only provides a small measure of security, and in fact it's no real security at all... if they steal your laptop they can just type your password as they saw you type it, and they're in! haha)

Basically only #1 is valid.

Don't bother making dumb non-constructive replies like. "Don't use your laptop in public" or "Don't use passwords." Either make an on-topic suggestion or find another thread.

EDIT:
Okay I got some interesting suggestions

3. Use a yubikey
but hey, it's not perfect yubikey got haxxed

4. Use a password manager. So you only have to type your password once. Then your password manager handles the rest.
That doesn't solve the problem of typing the password the first one or two times.

Last edited by Lop3; 04-27-2015 at 05:09 AM.
 
Old 04-27-2015, 05:36 AM   #2
Skaperen
Senior Member
 
Registered: May 2009
Location: center of singularity
Distribution: Xubuntu, Ubuntu, Slackware, Amazon Linux, OpenBSD, LFS (on Sparc_32 and i386)
Posts: 2,684
Blog Entries: 31

Rep: Reputation: 176Reputation: 176
ideas for this i got from the keypad device at an FBI office ... it randomly arranged the numbers on the touch pad so people watching your finger movements would not get your numbers.

1. a gui app that displays a randomized keyboard
but if someone is watching too close...

2. a cli app that shows a random character mapping for you to type in alternate keys
you have to think and it can make you slow...

also keys and agent for ssh
 
Old 04-27-2015, 05:45 AM   #3
veerain
Senior Member
 
Registered: Mar 2005
Location: Earth bound to Helios
Distribution: Custom
Posts: 2,524

Rep: Reputation: 319Reputation: 319Reputation: 319Reputation: 319
I think in your constrain requirements everything would look awkward.

Better would be to use a biometric and little hack of your authentication programs.
 
Old 04-27-2015, 08:53 AM   #4
Ragnarok Warrior
Member
 
Registered: Nov 2005
Location: Bangor, ME
Distribution: Debian,Ubuntu,DSL
Posts: 87

Rep: Reputation: 18
I read something similar almost a decade ago. Some of the older members may remember this. There was a handheld barcode scanner that was being freely distributed by some grocery franchise or something for checking coupons. They were easily hackable for use on the old ps/2 keyboard ports and you could create your own barcode password. What you did was make the barcode, scan it to a text file so you could view the hash, then enter that hash manually as a password for anything and from then on all you needed to do was scan your barcode when prompted for a password. It was really clever and I wish I could find the articles again.
There are a few computers with biometric locks nowadays so I'm sure that a usb based scanner of some sort could be hacked to work as a keyboard.

Edit: Well my memory is not as bad as it seems, google CueCat

Last edited by Ragnarok Warrior; 04-27-2015 at 08:58 AM.
 
Old 04-27-2015, 09:01 AM   #5
pan64
LQ Addict
 
Registered: Mar 2012
Location: Hungary
Distribution: debian/ubuntu/suse ...
Posts: 21,841

Rep: Reputation: 7308Reputation: 7308Reputation: 7308Reputation: 7308Reputation: 7308Reputation: 7308Reputation: 7308Reputation: 7308Reputation: 7308Reputation: 7308Reputation: 7308
chip card reader. You need to keep the card in the reader (pulled out -> locked laptop)
 
Old 04-27-2015, 09:08 AM   #6
veerain
Senior Member
 
Registered: Mar 2005
Location: Earth bound to Helios
Distribution: Custom
Posts: 2,524

Rep: Reputation: 319Reputation: 319Reputation: 319Reputation: 319
Quote:
Originally Posted by pan64 View Post
chip card reader. You need to keep the card in the reader (pulled out -> locked laptop)
But the OP doesn't wants to lock the whole laptop. He wants to stop prying eyes looking the passwords he types for various authentication requiring programs.
 
Old 04-27-2015, 09:50 AM   #7
pan64
LQ Addict
 
Registered: Mar 2012
Location: Hungary
Distribution: debian/ubuntu/suse ...
Posts: 21,841

Rep: Reputation: 7308Reputation: 7308Reputation: 7308Reputation: 7308Reputation: 7308Reputation: 7308Reputation: 7308Reputation: 7308Reputation: 7308Reputation: 7308Reputation: 7308
that can be solved by a password manager program in general, but in some cases there is no other way but type in something (some pw managers can copy passwords to clipboard too)
 
Old 04-27-2015, 09:17 PM   #8
frankbell
LQ Guru
 
Registered: Jan 2006
Location: Virginia, USA
Distribution: Slackware, Ubuntu MATE, Mageia, and whatever VMs I happen to be playing with
Posts: 19,323
Blog Entries: 28

Rep: Reputation: 6141Reputation: 6141Reputation: 6141Reputation: 6141Reputation: 6141Reputation: 6141Reputation: 6141Reputation: 6141Reputation: 6141Reputation: 6141Reputation: 6141
I use keepassx for passwords. I recommend it wholeheartedly.

One nice feature is that it's cross-platform. It works on Linux, Mac, and Windows, and its databases are compatible with keepassdroid for Android.

Last edited by frankbell; 04-27-2015 at 09:19 PM.
 
1 members found this post helpful.
Old 04-28-2015, 02:49 AM   #9
TenTenths
Senior Member
 
Registered: Aug 2011
Location: Dublin
Distribution: Centos 5 / 6 / 7
Posts: 3,475

Rep: Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553Reputation: 1553
While things can be partially mitigated with all the efforts above also consider 2 factor authentication where possible and where it's not possible then change passwords on a regular basis.

All you can really do is mitigate against "casual" password snoopers. If someone really wants your password then they'll get it.
 
1 members found this post helpful.
Old 04-28-2015, 09:59 AM   #10
Habitual
LQ Veteran
 
Registered: Jan 2011
Location: Abingdon, VA
Distribution: Catalina
Posts: 9,374
Blog Entries: 37

Rep: Reputation: Disabled
Quote:
Originally Posted by Lop3 View Post
What practical solutions are there?
WiFi is not secure.
Practically solves itself now doesn't it?
 
Old 04-28-2015, 10:30 AM   #11
maples
Member
 
Registered: Oct 2013
Location: IN, USA
Distribution: Arch, Debian Jessie
Posts: 814

Rep: Reputation: 265Reputation: 265Reputation: 265
Quote:
Originally Posted by Habitual View Post
WiFi is not secure.
Practically solves itself now doesn't it?
Not if you use another layer of encryption, such as a SSH tunnel or tor or some other encrypted proxy.

Also, the root password for the laptop isn't going to go out over WiFi. (If it is, then you've got bigger issues to worry about.)

Last edited by maples; 04-28-2015 at 10:31 AM.
 
Old 04-28-2015, 12:48 PM   #12
rokytnji
LQ Veteran
 
Registered: Mar 2008
Location: Waaaaay out West Texas
Distribution: antiX 23, MX 23
Posts: 7,111
Blog Entries: 21

Rep: Reputation: 3474Reputation: 3474Reputation: 3474Reputation: 3474Reputation: 3474Reputation: 3474Reputation: 3474Reputation: 3474Reputation: 3474Reputation: 3474Reputation: 3474
Never mind.

Last edited by rokytnji; 04-28-2015 at 12:50 PM.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Keyrings - a place to store passwords for many systems? Chris Sharman Linux - Security 2 05-03-2008 01:46 AM
Best place for releasing *nix programs(GPL) for public ErV General 12 06-25-2007 05:13 PM
starting linux without entering any passwords sharapchi Linux - General 14 12-27-2006 08:28 AM
Entering Wireless Networking for the First Time, Need Suggestions goldennuggets Linux - Wireless Networking 7 10-15-2006 02:09 PM
C/C++ Entering passwords... jamie_barrow Programming 4 12-27-2003 11:33 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 07:01 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration