Bad password-masking (in movies)

For some reason, movies have a tendency to show password that someone types into a computer in such a way that each character is shown briefly before being replaced by a circle, ×, or asterisk. This is terrible from a security standpoint as can be seen in the movie Iron Man 3 since you can probably see what the password is. I can’t fathom what reason they could have for doing this other than as an easter-egg for viewers. Hopefully real developers never do this; if you are ever in a position to create an interface that involves entering sensitive information which needs to be masked, don’t show what was entered at all.

Scene from “Iron Man 3” with terrible password-masking
This is not secure (view full-size for animation)

Leave a Reply

Your email address will not be published.

five × 5 =