Post Ax1prDK50cw4kGbDua by Distante@mastodon.social
(DIR) More posts by Distante@mastodon.social
(DIR) Post #Ax1lpNya1vRfOEPqUK by mntmn@mastodon.social
0 likes, 0 repeats
why can't this show me which application? because this recently pops up on my empty gnome desktop after login, so i'd really like to know :D
(DIR) Post #Ax1m5feI5hL8pmgu5Q by mhoye@mastodon.social
0 likes, 0 repeats
@mntmn This kind of thing has been going on in Linux UIs for ages and it is just the most bonkers, infuriating thing. We spend all this time telling people to be extra careful to avoid sharing passwords and phishing anything and then build and apparently tolerate dialogs that say "put in your password" with no useful information why or any way to validate any claims or anything.I mean, what are we even doing here?
(DIR) Post #Ax1n2go3QmGPVeOrnk by killed2@social.linux.pizza
0 likes, 0 repeats
@mntmn Don't worry, it's just the NSA. You have nothing to hide, have you? đ¤Ł
(DIR) Post #Ax1ndrM5AoTmwO2ZiS by nekohayo@mastodon.social
0 likes, 0 repeats
@mntmn I've only seen that happen on desktops with automatic login (as the keyring is supposed to get unlocked by the password used at the login screen) but yeah, it isn't greatâŚ
(DIR) Post #Ax1nkOeAJCaVvkcEd6 by bitshift@chaos.social
0 likes, 0 repeats
@mntmn a) journalctl -b | grep keyring may reveal the app (check `exe=`). sudo lsof -n | grep keyring might also help. Both not 100% reliable (maybe someone else has an idea)b) Could also be a broken keyring. I see it when auto-unlock fails and e.g. Nextcloud asks for auth. seahorse (âPasswords and Keysâ) shows same behavior / unlock not possible; I fix it by resetting via seahors (or deleting ~/.local/share/keyrings/). Never debugged it in detail.
(DIR) Post #Ax1pFnNkUfMpZoTOXA by TheProtoHobo@mastodon.social
0 likes, 0 repeats
@mntmn The worst part about this post in particular is that since my browser does precisely the same thing, I thought the image you posted was my browser prompting me. So, I tried to give the password a couple of times. Closed, reloaded my browser - realized it was an 'image in *your* post'. *facepalm" My eyes are drawn to the angry prompt box, which prevented me from reading the actual post.
(DIR) Post #Ax1prDK50cw4kGbDua by Distante@mastodon.social
0 likes, 0 repeats
@mntmn @linuxmint has the same problem. Surely this can be fixed with commands that will break something in the future, but it's a bit of an unpleasant problem with Linux
(DIR) Post #Ax1q0dKdg4Ny17LurY by lordkhan@social.cologne
0 likes, 0 repeats
@mntmn are you questioning the prompt or even authority? đ
(DIR) Post #Ax1rfE6kSrrxc4m8q8 by boilingsteam@mastodon.cloud
0 likes, 0 repeats
@mntmn bad UI...
(DIR) Post #Ax1ukpme78g3lyjprc by xChaos@f.cz
0 likes, 0 repeats
@mntmn I have the feeling, that this used to be command line prompt (in which case, you could vaguely find out who is asking for password) but when it finds out GUI is available, it just uses GUI instead of command line prompt.I had similar experience when running ssh from one of graphical terminals: what used to be password prompts, was suddenly replaced by fancy GUI prompt and once password was typed in, ssh stopped asking for passphrase every time it was invoked (and now it somehow doesn't ask at all, which I am not sure if is good or bad, but as it is easy to use, I somehow got used to it)Of course it doesn't make sense to pop up this from the middle of the nowhere, without sufficient indices about who and why is asking. I am just explaining where it may have originated. I believe that if you unlock this keyring stuff, whatever it is, your ssh client will stop asking for passphrase (if your private key is protected by passphrase).But it is exactly on of the reasons, why desktop Linux use is so counter intuitive (well, Windows ask for re-logins to almost anything these days too...). We just get used to weird stuff if we decide to stick with Linux desktop, but what we expected was that it will be less weird.
(DIR) Post #Ax1x45ATL7fetfBlUe by fazalmajid@vivaldi.net
0 likes, 0 repeats
@mntmn perhaps xwininfo can help identify the culprit
(DIR) Post #Ax1xZy3lIs0C7MFp0i by FritzAdalis@infosec.exchange
0 likes, 0 repeats
@mntmn @kevin I mean just configure auditd to log all the processes and then parse the logs. Maybe use strace. Easy peasy!/s
(DIR) Post #Ax1y6ivqZJSIkxAg9A by stevecrozz@ruby.social
0 likes, 0 repeats
@mntmn are you able to file a bug report?
(DIR) Post #Ax1yGi8KOQEpAult2W by raracool@mastodon.ie
0 likes, 0 repeats
@mntmn when this is a problem even Windows solved in 2007 then its maybe something that should be worked on
(DIR) Post #Ax1yckzOSIL4P46YOu by 90sCraig@pb.craignt.com
0 likes, 0 repeats
@mntmn I think you are just supposed to blindly authenticate. It's fine.... Everything is fine... If cyber security has taught us anything it's to always trust a random box to type in our passwords!
(DIR) Post #Ax1ymKRvz4WEzJ1DiS by koehntopp@infosec.exchange
0 likes, 0 repeats
@mntmn Same in MacOS.And yet we wonder why phishing works.
(DIR) Post #Ax1yyWPbKlr3Yzk22S by aspragg@ohai.social
0 likes, 0 repeats
@mntmn On my system, itâs Chromium that does this. I can reproduce by closing and restarting it. I need to hit âcancelâ 3 times for it to get the hint each time đ
(DIR) Post #Ax1z1j6Kc1gPmrFx8C by fishidwardrobe@social.tchncs.de
0 likes, 0 repeats
@mntmn /var/log/auth?
(DIR) Post #Ax20nOOV0H3vQ52xt2 by chriswood@mastodon.design
0 likes, 0 repeats
@mntmn I get this if I turn on my computer and log in with my fingerprint instead of my password. The computer canât access any saved passwords and security keys if you donât enter your password when you first log in - a fingerprint isnât enough. Could that be the culprit?
(DIR) Post #Ax246iecCXtfcSUaNE by josch@floss.social
0 likes, 0 repeats
@mntmn I'm not a gnome user but this reminds me of the GPG pinentry dialog which is similarly sparse.
(DIR) Post #Ax299tiC2r06YOV7Cq by Miner34@mastodon.social
0 likes, 0 repeats
@mntmn KDE tells you which application it is. I find it odd that Gnome doesn't.
(DIR) Post #Ax2QMQh8wHTjXpZTWK by causticmsngo@mastodon.social
0 likes, 0 repeats
@mntmn I have only ever seen a prompt like this that stated the application. I would be very suspicious of this prompt.
(DIR) Post #Ax2R9UMQ6APB6TGsYS by rstein@social.tchncs.de
0 likes, 0 repeats
@mntmn Have you logged in with a fingerprint? I had that problem, it got away after I logged in with my password and used the fingerprint only for resume after suspend.