> happens. In my opinion, this is a unfixable bug. Whatever we do in login to > prevent it could be done by an attacker, too. But I may well be wrong.
Exactly. So, this is exactly why I closed the bug and I see no point discussing forever to just discover that login can be mimiced. So what? GDM also can be mimiced, as well ass any other program or stuff requiring people to type in passwords. So, I see really no point in us wasting valuable time discussing this issue. Other people are welcomed to do so : on my side, I won't comment anymore. Please close this bug when all hairs have been careully cut in four parts (typical French joke).