Notifications are visible to anyone when screen is locked

[Kaspar Kööp]

On 11 June 2010 11:13, Vincent <mailinglists at vinnl.nl> wrote:

>
>
> On Fri, Jun 11, 2010 at 9:57 AM, Kaspar Kööp <meborc at gmail.com> wrote:
>
>> Hi all,
>>
>> There are a lot of bugreports and blueprints concerning the notification
>> system so I really could not find if this has been discussed already or not,
>> but here goes:
>>
>> If i am signed in to MSN (pidgin) and lock my screen (ctrl+alt+delete)
>> then the screensaver comes on and locks the screen BUT all the messages I
>> receive or other notifications are still visible (or rather appear as
>> normal) on the upper right corner of the screen.
>>
>> I think when people lock their machine it is because of security reasons
>> and visible IM conversation is in no way secure.
>>
>> Any thoughts?
>>
>>
> Sounds like a serious issue. Could you report it at bugs.ubuntu.comagainst gnome-screensaver? (Or perhaps xscreensaver, I suppose. Which
> version of Xubuntu are you using?)
>
>
>>
>> Kaspar
>>
>>
> Best,
> --
> Vincent
>
> --
> xubuntu-devel mailing list
> xubuntu-devel at lists.ubuntu.com
> https://lists.ubuntu.com/mailman/listinfo/xubuntu-devel
>
>
I'm using Xubuntu 10.04 with the standard xscreensaver 5.10

I have reported the bug and marked it security related. This means it is
private and can be seen only by me and the security team at the moment.

Sensitive information - email content and im conversations - make this a
security breach.


Kaspar
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/xubuntu-devel/attachments/20100611/968580c8/attachment.html>