https://bugs.kde.org/show_bug.cgi?id=433485

Alois Wohlschlager <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Resolution|---                         |WAITINGFORINFO
                 CC|                            |[email protected]
             Status|REPORTED                    |NEEDSINFO

--- Comment #1 from Alois Wohlschlager <[email protected]> ---
You mentioned this could be solved on Wayland, but your trick already doesn't
work on Wayland today. For me, nothing is logged by "xinput test". Also, could
you please clarify what you mean by "a la gksudo"? gksudo is deprecated and not
shipped at all by most distros at all anymore, so I cannot tell whether it
manages to protect itself against this on X11.

Please note as well that in you should not enter your password into anything if
you suspect untrusted processes are running as your user. There are numerous
other attacks, like "debugging" the agent or simply impersonating the password
prompt.

-- 
You are receiving this mail because:
You are watching all bug changes.

Reply via email to