RE: non print chars for password's

[Joel Fritz <JFritz@xxxxxxxxxxxxxxxx>]

Displaying asterisks to show the number of characters entered in a password
field seems to be a very reasonable thing to me.  I mistype my password all
the time.  When I'm writing, I often type double letters as triple letters.
It's a security flaw, but it sure is convenient.  This sounds like something
that (gasp) a DDS keyword could solve.

I think it's an inherent defect in screen at a time I/O.  Don't want to
start a war, I know there are real avantages.  I've written one character at
a time screens before.  By the time you've built support for things like
insert, overstrike, home, and end....

 
> -----Original Message-----
> From: Chris Beck [mailto:CBeck@good-sam.com]
> Sent: Wednesday, February 16, 2000 7:27 AM
> To: RPG400-L@midrange.com
> Subject: RE: non print chars for password's
> 
> 
> Well the thing is it is the last four digits of the 
> employee's social security number.  So every one knows how 
> long they are and what they are if the know someone elses 
> SSN,  (not my idea).  It is nothing highly confidential, just 
> how much vacation time they have and the like.      
> 
> The reason for wanting to see it is Users in the field (are 
> stupid)  they don't have a clue how to use a keyboard and the 
> arrow keys or anything.  so they want to at least see where 
> they are typing. to avoid less confusion.
> 
> 
> >>> buck.calabro@aptissoftware.com 02/16/00 08:12AM >>>
> Chris Beck wrote:
> >I have a password that I need to at least have the line 
> >show up under it.  or I would like to have stars print 
> >when the user presses a key.
> 
> Normally a non-display field doesn't show anything, not even 
> an underline.
> If you set DSPATR(ND UL) the ND supercedes the UL and you 
> see...nothing.
> The idea is that if you want to keep the password a secret, why tell
> everybody looking at the screen how long it is?  It sounds as 
> if you need to
> emulate some PC program functionality.  Perhaps you can write 
> the front-end
> as a Visual RPG/Basic/C/Java application and have it 
> communicate to the
> AS/400 to get/put the data?
> 
> Buck
> +---
> | This is the RPG/400 Mailing List!
> | To submit a new message, send your mail to RPG400-L@midrange.com.
> | To subscribe to this list send email to RPG400-L-SUB@midrange.com.
> | To unsubscribe from this list send email to 
> RPG400-L-UNSUB@midrange.com.
> | Questions should be directed to the list owner/operator: 
> david@midrange.com 
> +---
> 
> +---
> | This is the RPG/400 Mailing List!
> | To submit a new message, send your mail to RPG400-L@midrange.com.
> | To subscribe to this list send email to RPG400-L-SUB@midrange.com.
> | To unsubscribe from this list send email to 
> RPG400-L-UNSUB@midrange.com.
> | Questions should be directed to the list owner/operator: 
> david@midrange.com
> +---
> 
+---
| This is the RPG/400 Mailing List!
| To submit a new message, send your mail to RPG400-L@midrange.com.
| To subscribe to this list send email to RPG400-L-SUB@midrange.com.
| To unsubscribe from this list send email to RPG400-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---