Public bug reported:

Binary package hint: gdm

In many environments computers are left unattended (e.g. schools,
libraries, etc) and people can launch applications which mimic the look-
and-feel of the login application (GDM) in order to get the users
username and password.

This is called login spoofing.
* http://en.wikipedia.org/wiki/Login_spoofing

Login spoofing can be prevented by using a secure attention key which is a key 
combination pressed before the user login to launch the password request 
dialog. This key can only be seen by the kernel, and not sniffed by any 
application.
* http://en.wikipedia.org/wiki/Secure_attention_key

** Affects: gdm (Ubuntu)
     Importance: Undecided
         Status: New

** Affects: kdebase (Ubuntu)
     Importance: Undecided
         Status: New

** Affects: xdm (Ubuntu)
     Importance: Undecided
         Status: New

** Also affects: kdebase (Ubuntu)
   Importance: Undecided
       Status: New

** Also affects: xdm (Ubuntu)
   Importance: Undecided
       Status: New

-- 
Secure attention key
https://bugs.launchpad.net/bugs/237721
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to