Hacker News Reader

Comment by walterbell | Hacker News Reader

> Passcodes are vulnerable to shoulder surfers

And countless cameras with frame-by-frame playback.

  Linux:     print * to hide password keystrokes
  BSD:       print * to hide password keystrokes
  Windows:   print * to hide password keystrokes
  Apple iOS: E N L A R G E and INVERT password keystrokes

What do stock Android and Graphene show during password entry?

View on HN

By default Android is the same but it let's you turn it off. With the lock screen you can reduce feedback to only the password stars appearing and no key highlights. With password elsewhere you can remove the momentary password character preview. The keyboard lets you reduce key press feedback prominence so it's only a momentary flicker (and no character pop up), but there really should be an API to make the keyboard aware it's in "password mode" so you could eliminate feedback entirely.

GBoard has "incognito mode" when it's a Chromium incognito window, but unfortunately none of the feedback is disabled and it appears to be deprecated.

Pretty crazy that people use keyboards and grant them network/internet access.

https://developer.android.com/reference/android/support/v13/...

Reply on news.ycombinator.com