Path: utzoo!utgpu!news-server.csri.toronto.edu!cs.utexas.edu!wuarchive!zaphod.mps.ohio-state.edu!mips!smsc.sony.com!dce
From: dce@smsc.sony.com (David Elliott)
Newsgroups: comp.unix.misc
Subject: Login vs. typeahead
Message-ID: <1990Nov13.182623.18967@smsc.sony.com>
Date: 13 Nov 90 18:26:23 GMT
Sender: dce@smsc.sony.com (David Elliott)
Organization: Sony Microsystems Corp, San Jose, CA
Lines: 9

We have a complaint that our system (like most versions of Unix)
doesn't handle users who like to type their password immediately after
their login.  Specifically, if a user tries to do this, some or all of
the password they type is displayed on the screen, and then this data
is ignored by getpass(), which flushes the input before it reads.

What I would like to know is if there is a good reason for the current
behavior, and if changing this behavior might in some way compromise
the security of the system.