"Ctrl-Alt-Del to login" important for security?

James Livingston doclivingston at gmail.com
Wed Mar 1 13:35:00 GMT 2006


On Wed, 2006-03-01 at 14:44 +0200, Duncan Anderson wrote:
> For a malicious user to do what you suggest, they would have to have write 
> permission to the display.

Which is fairly easy to get.

User A logs in, starts a full-screen application which looks like GDM,
and walks away. User B comes up to the machine, sees what looks like GDM
and attempts to log in. User A now has user B's password.


Cheers,

James "Doc" Livingston
-- 
Every now and then, Google doesn't throw up what I need so I start
checking Altavista, Yahoo, etc. In almost every single case, I am
brutally reminded why I use Google in the first place. -- John Riddoch, 




More information about the sounder mailing list