From: | Michel Feinstein <michelfeinstein(at)gmail(dot)com> |
---|---|
To: | tutiluren(at)tutanota(dot)com |
Cc: | "pgadmin-support lists(dot)postgresql(dot)org" <pgadmin-support(at)lists(dot)postgresql(dot)org> |
Subject: | Re: How do I remove this stupid "master password"? |
Date: | 2019-07-09 17:36:04 |
Message-ID: | CAEg4jbPjPKQcsHd-pMkX8m_rC8pOrfjYUdeyXMKn-Qxi=ekqBg@mail.gmail.com |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgadmin-support |
Hi tutiluren,
I understand your frustration and I am sorry about how you feel. I am not
the developer who implemented this, but I am the guy who reported the
security vulnerability this addresses.
If you look into some past messages you will understand the issue and what
was behind the decisions by the devs. In a nutshell, it prevents malware
(either in the browser itself or in your machine, or a junior dev machine
and etc.) to scan for postgresql credentials and send them to an attacker.
It can be more then that so I advise you to read the thread if you are
further interested.
Again, I am sorry about how you feel, but this decision was definitely not
taken without a lot of thought and not by any Microsoft employees that I
know of :)
Best wishes,
Michel.
On Tue, Jul 9, 2019, 14:21 <tutiluren(at)tutanota(dot)com> wrote:
> Not long ago, I updated pgAdmin 4 as I did every time a new version was
> available (because it wouldn't stop pestering me about it), even though
> this was a massive chore and not automated in any way. Anyway, with some
> recent version, it started popping up this obnoxious, pointless "master
> password" idiocy, every single time I tried to click or load anything. It
> just wouldn't shut up about it. I tried setting an empty password, but of
> course it wouldn't even accept that.
>
> Eventually, after wasting countless hours on trying to find out how to
> disable this unwanted "feature", realizing that there was no way to do so
> (the supposed instructions were incomplete/nonsensical), I was forced to
> downgrade to the last version. From that point on, I stopped running my
> script which checks for new versions of pgAdmin 4 and downloads them for me
> (to save some time and energy every time it wants to update).
>
> The other day, I decided that my pgAdmin is getting too old, and hopefully
> they will have removed this stupidity by now. Alas, I found that it was
> still there, but I think it looked different this time. I'm not sure.
> Either way, furious that it wouldn't go away (this kind of thing is just as
> bad as, if not *worse* than, ads), I made a single space the "master
> password".
>
> Now, I'm forced to waste my time, energy and focus every single time I
> need to admin my databases by needlessly inputting a single space and click
> a button before it lets me in. And no, it doesn't remember this because I
> clear all browser data many times a day (out of necessity). It really does
> "add up" and makes me despise the software and look at it at a chore rather
> than something useful. I thought it was already bad enough that it requires
> a browser and has a "warmup time" (the first time each time the computer
> boots)...
>
> How do I turn this off? How do I make it never appear ever again? How do I
> disable it? I have no idea who thought that this was a good idea, but I
> strongly suspect that nobody did, and it was just added to piss people off.
> I've dealt with enough "bizarre" decisions made by software authors to
> still believe that they don't know what they're doing. They know. If they
> use the software themselves, they know. This has literally *no* practical
> purpose that I can think of, and wasn't even explained. It just appeared
> randomly one day with an update. "Here's some random unwanted change for
> the worse. Deal with it, user." ... you'd almost think that Microsoft had a
> finger in the development of this program.
>
> If there is some sort of edge-case scenario where this actually makes
> sense (I cannot think of any, and I have excellent imagination...), why not
> make this OPTIONAL? Why put it there BY DEFAULT, and why FORCE us to pick a
> "master password" even if we have no need for it and it's nothing but
> unwanted stupidity that makes us hate the authors of the software and swear
> to never, ever donate or help out the project in any way? Why turn your
> users into enemies?
>
> PS: Man, I long back to the days when pgAdmin III still worked and was
> maintained. It got so bad in the end that I had to click away countless
> error boxes before I could do anything in it...
>
> PS 2: This stuff about requiring people to create an account and submit
> all our data to Google to send e-mails to this list is just insanity. What
> is wrong with you people?! You apparently have done anything to shield
> yourselves from people contacting you. This lengthy, 48-step process of
> actually getting to send this damn e-mail is incredibly tiresome and
> insulting...
>
From | Date | Subject | |
---|---|---|---|
Next Message | Edson Richter | 2019-07-09 19:02:39 | Strange "empty dialog" in workspace |
Previous Message | richard coleman | 2019-07-09 17:26:03 | Re: How do I remove this stupid "master password"? |