Good job Loaf :3

** Information type changed from Private Security to Public Security

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to gnome-shell in Ubuntu.
https://bugs.launchpad.net/bugs/1972889

Title:
  Screen reader reads the data while computer is locked

Status in gnome-shell package in Ubuntu:
  New

Bug description:
  # lsb_release -rd
  Description:  Ubuntu 22.04 LTS
  Release:      22.04

  # apt-cache policy gnome-shell
  gnome-shell:
    Installed: 42.0-2ubuntu1
    Candidate: 42.0-2ubuntu1
    Version table:
   *** 42.0-2ubuntu1 500
          500 http://us.archive.ubuntu.com/ubuntu jammy/main amd64 Packages
          100 /var/lib/dpkg/status

  Ubuntu is installed on a laptop. Within five minutes of inactivity,
  the screen lock activates and locks the system. Computer is secured.
  10 minutes later, my cat (her name is Loaf) comes up to the laptop and
  sits down on the keyboard. This activates a screen reader. (Shortcut
  is Alt + Super + S)

  What I've expected:
  Screen reader would start reading the contents of a lock screen

  What happened:
  Screen reader app started reading contents of a Brave Browser window that was 
opened on my desktop. It read all tabs and proceeded reading the opened web 
page. 

  
  I've reported this bug at secur...@ubuntu.org and got the following answer:

  > Nice find - I am able to reproduce this locally in Ubuntu 22.04 LTS too
  > - I suspect this is a vulnerability in gnome-shell as it is
  > responsible for handling the lock screen in standard Ubuntu.

  As per further directions, I'm posting this bug here and in gnome
  repo.

  
  P.S. I expect Loaf being credited for this find. She really likes treats.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-shell/+bug/1972889/+subscriptions


-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to     : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to