Reading a keystroke w/o echo

[Stanley Friesen]

In article <91147.164007TGREENIN at ESOC.BITNET> TGREENIN at ESOC.BITNET writes:
>Sorry, this just won't work with Teletypes. What you should do is
>
>1. Get the user to check noone is looking.
>2. ...
>5. If you want a *truly* secure routine, then prompt the user to
>   remove the ribbon (if appropriate) and burn it after the program
>   has finished running. ...

And, if the Teletype has a built-in paper tape punch, have the user make
sure it is turned off!

Seriously, I once walked into a public computer center and found a strip
of punched paper tape laying about.  When I checked out its contents it
was somebodies login - including password (and carriage returns and over-
strikes).

Luckily for that user I am a fairly considerate person - I destroyed the
tape and did not do anything nasty to his account.

Password security is *not* a trivial job.  [Just think about logging in
over a network with a packet monitor on it].
-- 
---------------
uunet!tdatirv!sarima				(Stanley Friesen)