Showing the contents of the desktop/windows on a system that is supposed to be
locked is a serious security issue. 

I am surprised to find this behavior in the current xscreensaver and more
surprised to see this listed as a "minor" severity bug here on Debian.

This same problematic behavior occurred a few years ago with Ubuntu and
gnome-screensaver. It was fixed shortly thereafter.

Ubuntu took the problem very seriously and the bug in Launchpad was listed as
"critical":
https://bugs.launchpad.net/ubuntu/+source/gnome-screensaver/+bug/390989

Upstream gnome also assigned the bug a severity of "critical":
https://bugzilla.gnome.org/show_bug.cgi?id=654746

I hope this can be addressed in the current Debian Wheezy with Xfce4.

Thanks! 

_______________________________________________
Pkg-xfce-devel mailing list
[email protected]
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-xfce-devel

Reply via email to