<![CDATA[Installed Ubuntu 26.04 for the first time.]]>Installed Ubuntu 26.04 for the first time.

Logged into a TTY.

me@box:~$ sudo-s
Password: ********************

EXCUSE ME--ASTERISKS? WTF?

Look, obviously I appreciate that seeing the character count as you type makes it easier. But this is supposed to be suitable for high security environments. And making it easy to see the character count is a significant entropy leak.

This should not be the default configuration, particularly in Ubuntu *server* (which is what I installed). DISAPPROVE.

]]>https://board.circlewithadot.net/topic/e3b85e91-faaf-4cb6-8945-fca35410d6dc/installed-ubuntu-26.04-for-the-first-time.RSS for NodeFri, 15 May 2026 05:27:24 GMTMon, 27 Apr 2026 14:35:39 GMT60<![CDATA[Reply to Installed Ubuntu 26.04 for the first time. on Wed, 29 Apr 2026 14:37:29 GMT]]>@jimsalter I mean... kudos for using a 20 character password... 🙂

]]>https://board.circlewithadot.net/post/https://mstdn.ca/users/JustinDerrick/statuses/116488499961244061https://board.circlewithadot.net/post/https://mstdn.ca/users/JustinDerrick/statuses/116488499961244061Wed, 29 Apr 2026 14:37:29 GMT<![CDATA[Reply to Installed Ubuntu 26.04 for the first time. on Tue, 28 Apr 2026 22:42:35 GMT]]>@jimsalter @rl_dane @feoh after recent systemd debacles I've moved getting familiar with at least one BSD higher in my priority queue for this reason, although it would also be nice if Devuan deliberately develops in a direction consistent with the UNIX Philosophyâ„¢

]]>https://board.circlewithadot.net/post/https://mstdn.io/users/deutrino/statuses/116484745170009760https://board.circlewithadot.net/post/https://mstdn.io/users/deutrino/statuses/116484745170009760Tue, 28 Apr 2026 22:42:35 GMT<![CDATA[Reply to Installed Ubuntu 26.04 for the first time. on Tue, 28 Apr 2026 22:39:33 GMT]]>@feoh @jimsalter with every new release, Canonical validates my decision to ditch Ubuntu... which, wow, was like 5 years ago or more already if you don't count Linux Mint as being Ubuntu (because they rip out a lot of the bad decisions). time flies.

I'm gonna switch to Linux Mint Debian Edition when I reinstall my laptop, then it really will be the end of an era. no Ubuntu or derivatives on any system I control.

]]>https://board.circlewithadot.net/post/https://mstdn.io/users/deutrino/statuses/116484733218505188https://board.circlewithadot.net/post/https://mstdn.io/users/deutrino/statuses/116484733218505188Tue, 28 Apr 2026 22:39:33 GMT<![CDATA[Reply to Installed Ubuntu 26.04 for the first time. on Tue, 28 Apr 2026 22:18:58 GMT]]>
I used Ubuntu for close to 15 years and have been using LMDE for the last couple years (along with Devuan and Artix).

#Linux #Ubuntu]]>https://board.circlewithadot.net/post/https://social.retroedge.tech/objects/43c14e8f-0c1b-4c18-b943-688551171546https://board.circlewithadot.net/post/https://social.retroedge.tech/objects/43c14e8f-0c1b-4c18-b943-688551171546Tue, 28 Apr 2026 22:18:58 GMT<![CDATA[Reply to Installed Ubuntu 26.04 for the first time. on Tue, 28 Apr 2026 21:26:06 GMT]]>@rl_dane @feoh @jimsalter

Both. I see younger folks who grew up on M$ and Hipple who now want to be "free" in an M$ or Hipple way. They never tried to see Unix for Unix. That's why "systemd" is from an M$ dev. My guess is other tools are too, like 'ip' in lieu of ifconfig/route/arp/etc. The KISS philosophy died because next gen devs didn't change their thinking.

]]>https://board.circlewithadot.net/post/https://oldbytes.space/users/c64whiz/statuses/116484444401887468https://board.circlewithadot.net/post/https://oldbytes.space/users/c64whiz/statuses/116484444401887468Tue, 28 Apr 2026 21:26:06 GMT<![CDATA[Reply to Installed Ubuntu 26.04 for the first time. on Tue, 28 Apr 2026 20:11:31 GMT]]>@jimsalter https://documentation.ubuntu.com/release-notes/26.04/changes-since-previous-interim/

sudo-rs

Password feedback is now enabled by default in order to improve the user experience of sudo. If the previous behavior is preferred...

"improving the user experience of sudo" is a lame reason for them to make pwfeedback default now. Yes, its an easy change to revert that, but still...

]]>https://board.circlewithadot.net/post/https://mastodon.social/users/rootxazz/statuses/116484151157869174https://board.circlewithadot.net/post/https://mastodon.social/users/rootxazz/statuses/116484151157869174Tue, 28 Apr 2026 20:11:31 GMT<![CDATA[Reply to Installed Ubuntu 26.04 for the first time. on Tue, 28 Apr 2026 19:45:21 GMT]]>@jimsalter It disappears when you press <enter> so if you allowed someone to watch you typing, that seems a greater risk.

]]>https://board.circlewithadot.net/post/https://fosstodon.org/users/woo/statuses/116484048240745042https://board.circlewithadot.net/post/https://fosstodon.org/users/woo/statuses/116484048240745042Tue, 28 Apr 2026 19:45:21 GMT<![CDATA[Reply to Installed Ubuntu 26.04 for the first time. on Tue, 28 Apr 2026 18:59:42 GMT]]>@jimsalter @rl_dane AND YOU KIDS GET OFF JIM'S LAWN!

🙂

I wonder if the problem is that we're aging out.

Maybe there aren't enough people actually still actively contributing to open source who remember the Bad Old Days when every vendor had a brain wave about every aspect of the system and Everything Was Terrible.

]]>https://board.circlewithadot.net/post/https://oldbytes.space/users/feoh/statuses/116483868721948221https://board.circlewithadot.net/post/https://oldbytes.space/users/feoh/statuses/116483868721948221Tue, 28 Apr 2026 18:59:42 GMT<![CDATA[Reply to Installed Ubuntu 26.04 for the first time. on Tue, 28 Apr 2026 18:38:56 GMT]]>@fedops @feoh it does but it also wants a non standard argument (which I have yet to inscribe permanently in my grey meat) to tell it to ignore the presence of a TTY belonging to a different UID.

]]>https://board.circlewithadot.net/post/https://fosstodon.org/users/jimsalter/statuses/116483787124972643https://board.circlewithadot.net/post/https://fosstodon.org/users/jimsalter/statuses/116483787124972643Tue, 28 Apr 2026 18:38:56 GMT<![CDATA[Reply to Installed Ubuntu 26.04 for the first time. on Tue, 28 Apr 2026 18:37:27 GMT]]>@rl_dane @feoh YES.

In short, I miss the unix philosophy. The Linux world seems to have almost entirely forgotten it. And all this LLM bollocks is the very literal and exact opposite!

]]>https://board.circlewithadot.net/post/https://fosstodon.org/users/jimsalter/statuses/116483781288745411https://board.circlewithadot.net/post/https://fosstodon.org/users/jimsalter/statuses/116483781288745411Tue, 28 Apr 2026 18:37:27 GMT<![CDATA[Reply to Installed Ubuntu 26.04 for the first time. on Tue, 28 Apr 2026 16:39:54 GMT]]>@jimsalter @feoh systemctl reboot doesn't work either?

Man those Ubuntu people are really on a roll recently.

]]>https://board.circlewithadot.net/post/https://fosstodon.org/users/fedops/statuses/116483319016486269https://board.circlewithadot.net/post/https://fosstodon.org/users/fedops/statuses/116483319016486269Tue, 28 Apr 2026 16:39:54 GMT<![CDATA[Reply to Installed Ubuntu 26.04 for the first time. on Tue, 28 Apr 2026 16:35:52 GMT]]>@jimsalter Whoa. Now THAT is gonna break an awful lot of muscle memory!

]]>https://board.circlewithadot.net/post/https://oldbytes.space/users/feoh/statuses/116483303182332007https://board.circlewithadot.net/post/https://oldbytes.space/users/feoh/statuses/116483303182332007Tue, 28 Apr 2026 16:35:52 GMT<![CDATA[Reply to Installed Ubuntu 26.04 for the first time. on Tue, 28 Apr 2026 16:34:41 GMT]]>@feoh yeah, "shutdown -r now" also stopped working in 26.04, because either you're a regular user without privileges to do so, or you're root *but your TTY under your real UID* is used as an excuse to prevent you.

Either way, you're left to use systemctl with weird arguments (like there's any other fucking way to use systemctl) to restart your system from the command line, because shutdown has been unceremoniously made useless without actually being removed.

]]>https://board.circlewithadot.net/post/https://fosstodon.org/users/jimsalter/statuses/116483298511431466https://board.circlewithadot.net/post/https://fosstodon.org/users/jimsalter/statuses/116483298511431466Tue, 28 Apr 2026 16:34:41 GMT<![CDATA[Reply to Installed Ubuntu 26.04 for the first time. on Tue, 28 Apr 2026 15:57:08 GMT]]>@jimsalter I get it, and I even get being grumbly about YET ANOTHER configuration tweak you need to make to have Ubuntu operate within your version of accepted norms, but at LEAST it's configurable and there's a clear and unambiguous way to set it back to prior behavior.

They could pull a systemd ... "All bets are off. Like it or lump it!" 🙂

]]>https://board.circlewithadot.net/post/https://oldbytes.space/users/feoh/statuses/116483150842203004https://board.circlewithadot.net/post/https://oldbytes.space/users/feoh/statuses/116483150842203004Tue, 28 Apr 2026 15:57:08 GMT<![CDATA[Reply to Installed Ubuntu 26.04 for the first time. on Tue, 28 Apr 2026 15:52:57 GMT]]>@feoh pretty sure it boils down to "rust rewrites are the new hotness so we dropped sudo-rs in where sudo used to be."

In fairness to sudo-rs, that project is in part trying to simplify things from classic sudo, which is rather crufty with decades of often inadvisable feature creep.

I'm cool with getting on board THAT part of the train but I'm not happy about the asterisks.

]]>https://board.circlewithadot.net/post/https://fosstodon.org/users/jimsalter/statuses/116483134414209063https://board.circlewithadot.net/post/https://fosstodon.org/users/jimsalter/statuses/116483134414209063Tue, 28 Apr 2026 15:52:57 GMT<![CDATA[Reply to Installed Ubuntu 26.04 for the first time. on Tue, 28 Apr 2026 15:48:51 GMT]]>@ayushnix there's a significant difference between the entropy of a "roughly eight to twelve, I think?" character line noise secret, and a "precisely eleven character" line noise secret. The length also gives you a very strong clue whether you are looking at characters or words as tokens in the secret, more lost entropy.

Don't get me wrong, this isn't the end of the world. But I don't *like* it. IMO this is a dumbing-down, and not a good one.

]]>https://board.circlewithadot.net/post/https://fosstodon.org/users/jimsalter/statuses/116483118280133266https://board.circlewithadot.net/post/https://fosstodon.org/users/jimsalter/statuses/116483118280133266Tue, 28 Apr 2026 15:48:51 GMT<![CDATA[Reply to Installed Ubuntu 26.04 for the first time. on Tue, 28 Apr 2026 15:17:12 GMT]]>@johnlogic atari800 works great everywhere 🙂 That's one of its virtues.

You might also consider looking at Fujisan - https://github.com/pedgarcia/fujisan/ if you want to add networking to your emulated enjoyment!

]]>https://board.circlewithadot.net/post/https://oldbytes.space/users/feoh/statuses/116482993862981190https://board.circlewithadot.net/post/https://oldbytes.space/users/feoh/statuses/116482993862981190Tue, 28 Apr 2026 15:17:12 GMT<![CDATA[Reply to Installed Ubuntu 26.04 for the first time. on Tue, 28 Apr 2026 04:23:17 GMT]]>@jimsalter Maybe I'm wrong but not exposing password length seems like security theater to me. If someone types a strong 20 character random password or a 7-8 word diceware password, it won't really matter if the length is exposed. If someone types a weak 4 character password or uses something easily guessable, they're in trouble.

Besides, if someone is close enough to discern the password length by looking at those asterisks, they might be close enough to see or hear someone type and discern the length even if there are no visible asterisks.

]]>https://board.circlewithadot.net/post/https://social.ayushnix.com/users/ayushnix/statuses/01KQ957GBNSECBB79RK8NNMQ1Hhttps://board.circlewithadot.net/post/https://social.ayushnix.com/users/ayushnix/statuses/01KQ957GBNSECBB79RK8NNMQ1HTue, 28 Apr 2026 04:23:17 GMT<![CDATA[Reply to Installed Ubuntu 26.04 for the first time. on Mon, 27 Apr 2026 23:52:13 GMT]]>@feoh by the way, atari800 BASIC works pretty well on LMDE; I still enjoy playing with it.

]]>https://board.circlewithadot.net/post/https://sfba.social/users/johnlogic/statuses/116479356636184475https://board.circlewithadot.net/post/https://sfba.social/users/johnlogic/statuses/116479356636184475Mon, 27 Apr 2026 23:52:13 GMT<![CDATA[Reply to Installed Ubuntu 26.04 for the first time. on Mon, 27 Apr 2026 21:12:43 GMT]]>@johnlogic @jimsalter Glad you found something that works for you.

]]>https://board.circlewithadot.net/post/https://oldbytes.space/users/feoh/statuses/116478729477191299https://board.circlewithadot.net/post/https://oldbytes.space/users/feoh/statuses/116478729477191299Mon, 27 Apr 2026 21:12:43 GMT<![CDATA[Reply to Installed Ubuntu 26.04 for the first time. on Mon, 27 Apr 2026 21:12:00 GMT]]>@aburka @jimsalter Thanks for that.

Seems like you can disable this by setting 'pwfeedback' in your sudoers.

Interesting discussion on that issue.

]]>https://board.circlewithadot.net/post/https://oldbytes.space/users/feoh/statuses/116478726666393803https://board.circlewithadot.net/post/https://oldbytes.space/users/feoh/statuses/116478726666393803Mon, 27 Apr 2026 21:12:00 GMT<![CDATA[Reply to Installed Ubuntu 26.04 for the first time. on Mon, 27 Apr 2026 20:21:03 GMT]]>@feoh @jimsalter it is a design decision made by sudo-rs for UX reasons, yeah https://github.com/trifectatechfoundation/sudo-rs/issues/1300

]]>https://board.circlewithadot.net/post/https://hachyderm.io/users/aburka/statuses/116478526300651494https://board.circlewithadot.net/post/https://hachyderm.io/users/aburka/statuses/116478526300651494Mon, 27 Apr 2026 20:21:03 GMT<![CDATA[Reply to Installed Ubuntu 26.04 for the first time. on Mon, 27 Apr 2026 20:18:45 GMT]]>@feoh @jimsalter

I used Ubuntu for about 10 years.

But when they migrated to the snap package manager, I decided that they were no longer "reasonable".

I shopped for attractive alternatives, and for the last few years have been running Linux Mint Debian Edition (LMDE), which has been better overall. (Also: no asterisks in my TTY password entry.)

]]>https://board.circlewithadot.net/post/https://sfba.social/users/johnlogic/statuses/116478517310814721https://board.circlewithadot.net/post/https://sfba.social/users/johnlogic/statuses/116478517310814721Mon, 27 Apr 2026 20:18:45 GMT<![CDATA[Reply to Installed Ubuntu 26.04 for the first time. on Mon, 27 Apr 2026 16:44:18 GMT]]>@brnrd @jimsalter theres no reason to make it sound like rewriting an app on rust is not inherently now secure.

As far as i understood the interview i read showing asterisks as you type in the password was a conscious decision in and of itself.

]]>https://board.circlewithadot.net/post/https://fosstodon.org/users/rasmus91/statuses/116477674036859137https://board.circlewithadot.net/post/https://fosstodon.org/users/rasmus91/statuses/116477674036859137Mon, 27 Apr 2026 16:44:18 GMT