> I started looking at this.
> getty has echo turned off (at least the code looks as though it is
> doing its own echoing and line editing).
> There is an option as to whether echo is turned on before login is execed.
> I'm not sure of the state of this [1]
> Login does a load of work before asking for the password,  if the tty
> has echo enabled there is plenty of time for you to type something
> you shouldn't...

Ok: adding 'ec' to the line in /etc/gettytab will make getty exec
login with echo turned off.
This does stop any typeahead of the password being echoed.
It is discarded though.
The only slight problem is that login doesn't turn echo on when
asking for the username if it has to reprompt (this could be deemed to
be a bug).
It does get turned on by the time the shell runs.

If you are using a remote username database, then there is plenty of scope
for the password prompt being delayed much more than usual.
(ktrace has a similar effect)

	David

-- 
David Laight: david@l8s.co.uk