Debian WIFI security password problem

When you go to Network manager applet 1.20.0 to view the WIFI network and go to your WIFI SSID you will see a tab called wi-fi security, then there is a check box to see the WIFI password. If this is clicked the WIFI password is displayed without a admin password being entered. You should always have to enter a password to see the WIFI password, this exists for Mac OS and windows.

This still occurs on version 1.3.

Dont use Network Manager and use something else to connect to your wifi, or better yet lock your machine when away from it so no one can view it.

When you go to Network manager applet 1.20.0 to view the WIFI network and go to your WIFI SSID you will see a tab called wi-fi security, then there is a check box to see the WIFI password. If this is clicked the WIFI password is displayed without a admin password being entered. You should always have to enter a password to see the WIFI password, this exists for Mac OS and windows.

 

 

You would be suprised what else just gives out secrets in cleartext without authentication.

This is the prime example why I steer clear of GUIs. Not that this can't happen on CLI, but UI development is often times a couple of sizes too large for hobby developers.
I'm pretty sure I remember that 'nmtui' does not have this issue, which is an ncurses cli interface for NetworkManager.

Dont use Network Manager and use something else to connect to your wifi, or better yet lock your machine when away from it so no one can view it.

The issue is not with NetworkManager. It's the frontend to it. Besides that we don't know to what administrative lengths the OP went in regards of file permissions.

Nonetheless I believe that a lot more people should use NetworkManager, and this GUI in particular. Blow issues out of proportion, don't let these devs rest on subpar work.

I disagree. The network manager app works as it should with only the omission of not allowing an administrator only to access the secure portion of the WIFI password.

This is done with other operating systems as an example Apple. If you go to an Apple store you will not be able to change or see the WIFI password.

Looks like the network-manager-gnome, which is the gnome frontend to the network-manager package.

So the issue is not the NM, it's gnome's NM Frontend.

Also you can't really compare Apples with Oranges.

I agree that it does look like gnome but going through gnome site they do not list the Network Manager app 1.30.

https://apps.gnome.org/

It should be like adding a user through gnome. If you make an attempt to create a user it asks for Admin password.

i have submitted a issue for this

https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/issues/1487

i have submitted a issue for this

 

https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/issues/1487

Why would you want a user to be a Sudoer to get access to this info once they or someone else has loaded that wifi passphrase on the system. It is no longer secret information.

the reason you would want it is it would allow a Linux machine to be used publicly. As an example the Apple store or Bestbuy computer store.

Further Apple protects its WIFI information, Windows protects its WIFI information and Android.

the reason you would want it is it would allow a Linux machine to be used publicly. As an example the Apple store or Bestbuy computer store.

 

Further Apple protects its WIFI information, Windows protects its WIFI information and Android.

Best buy uses their public wifi for their computers that the public tries out. Those devices that are corporate use a Enterprise Wifi setup with Radius and uses a completely different scheme than the typical wifi connection uses. Suggest like before that you read up and invest in understanding how this kind of stuff works.

What KIOSK modes are inherent in operating systems? this has nothing to do with a separate application.

The reason Best buy can use their public WIFI for connection for there computer is that the computers O.S. prevents users from viewing the WIFI credentials. Best buys WIFI does not have a open or public WIFI with no password for there display computers. In that case a Linux operating system would not be secure as it would allow a user to change or view there WIFI credentials.