[Hampshire] SORRY
-- Please post to: Hampshire@mailman.lug.org.uk Web Interface: https://mailman.lug.org.uk/mailman/listinfo/hampshire LUG URL: http://www.hantslug.org.uk --
[Hampshire] Sorry for the cross post but you need to read this.
I dont normally let out stuff like this, but thought you lot should known. So far confirmed with: Gentoo Fedora ArchLinux You can kill a locked screen by pressing ctrl+alt+* please try this to see if you are vulnerable to this attack and let the list know your OS if different to the above. Cheers FC -- Please post to: Hampshire@mailman.lug.org.uk Web Interface: https://mailman.lug.org.uk/mailman/listinfo/hampshire LUG URL: http://www.hantslug.org.uk --
Re: [Hampshire] Sorry for the cross post but you need to read this.
On 19 January 2012 09:30, Freaky Clown freakycl...@gmail.com wrote: You can kill a locked screen by pressing ctrl+alt+* It doesn't do anything on the CentOS machine I have running right now. When you say kill a locked screen, what, exactly, do you mean? Does it effectively unlock it, leaving you viewing the previously locked desktop? Or does it do something else? please try this to see if you are vulnerable to this attack and let the list know your OS if different to the above. Hmmm using terms like attack without defining what the vulnerability is don't lead me (in my cynical head) to worry too much. Are there any corroborating reports of this that you can point at? -- Please post to: Hampshire@mailman.lug.org.uk Web Interface: https://mailman.lug.org.uk/mailman/listinfo/hampshire LUG URL: http://www.hantslug.org.uk --
Re: [Hampshire] Sorry for the cross post but you need to read this.
Seeing the same thing here (archlinux kde 4.7) after locking the screen pressing alt+crtl+* effectively unlocks the screen without authentication... -- Please post to: Hampshire@mailman.lug.org.uk Web Interface: https://mailman.lug.org.uk/mailman/listinfo/hampshire LUG URL: http://www.hantslug.org.uk --
Re: [Hampshire] Sorry for the cross post but you need to read this.
My ubuntu doesn't react to ctrl + alt + * either -- Please post to: Hampshire@mailman.lug.org.uk Web Interface: https://mailman.lug.org.uk/mailman/listinfo/hampshire LUG URL: http://www.hantslug.org.uk --
Re: [Hampshire] Sorry for the cross post but you need to read this.
On 19 January 2012 09:40, Michael Pavling pavl...@gmail.com wrote: It doesn't do anything on the CentOS machine I have running right now. PS CentOS 5.4, GNOME 2.16 (yes... this one is lagging behind a bit ;-) -- Please post to: Hampshire@mailman.lug.org.uk Web Interface: https://mailman.lug.org.uk/mailman/listinfo/hampshire LUG URL: http://www.hantslug.org.uk --
Re: [Hampshire] Sorry for the cross post but you need to read this.
Doesn't work for me on Ubuntu 10.04, although I haven't got a number pad which I assume is crucial part of this, as I'm pressengin ctrl+alt+8 or ctrl+alt+shit+8. -- James. http://www.jamesbensley.co.cc/ -- Please post to: Hampshire@mailman.lug.org.uk Web Interface: https://mailman.lug.org.uk/mailman/listinfo/hampshire LUG URL: http://www.hantslug.org.uk --
Re: [Hampshire] Sorry for the cross post but you need to read this.
Seems to be a xorg debug feature according to [1] [1] http://forums.fedoraforum.org/showthread.php?t=275363 On 19 January 2012 09:45, Michael Pavling pavl...@gmail.com wrote: On 19 January 2012 09:40, Michael Pavling pavl...@gmail.com wrote: It doesn't do anything on the CentOS machine I have running right now. PS CentOS 5.4, GNOME 2.16 (yes... this one is lagging behind a bit ;-) -- Please post to: Hampshire@mailman.lug.org.uk Web Interface: https://mailman.lug.org.uk/mailman/listinfo/hampshire LUG URL: http://www.hantslug.org.uk -- -- Please post to: Hampshire@mailman.lug.org.uk Web Interface: https://mailman.lug.org.uk/mailman/listinfo/hampshire LUG URL: http://www.hantslug.org.uk --
Re: [Hampshire] Sorry for the cross post but you need to read this.
Yes, it's with the numpad *, the 8/shift+8 keys don't do it for me. Seems that it was introduced in version 1.11 of xorg [1] (Arch is currently on 1.11.3) don't think Ubuntu past 1.10 yet so shouldn't be affected. [1] http://www.phoronix.com/scan.php?page=news_itempx=MTA0NTA On 19 January 2012 09:48, James Bensley jwbens...@gmail.com wrote: Doesn't work for me on Ubuntu 10.04, although I haven't got a number pad which I assume is crucial part of this, as I'm pressengin ctrl+alt+8 or ctrl+alt+shit+8. -- James. http://www.jamesbensley.co.cc/ -- Please post to: Hampshire@mailman.lug.org.uk Web Interface: https://mailman.lug.org.uk/mailman/listinfo/hampshire LUG URL: http://www.hantslug.org.uk -- -- Please post to: Hampshire@mailman.lug.org.uk Web Interface: https://mailman.lug.org.uk/mailman/listinfo/hampshire LUG URL: http://www.hantslug.org.uk --
Re: [Hampshire] Sorry for the cross post but you need to read this.
Neither on my Debian, Gentoo or Ubuntu box. However, I use xscreensaver to lock my screen on all of the above. On Thursday 19 January 2012 09:30:44 Freaky Clown wrote: I dont normally let out stuff like this, but thought you lot should known. So far confirmed with: Gentoo Fedora ArchLinux You can kill a locked screen by pressing ctrl+alt+* please try this to see if you are vulnerable to this attack and let the list know your OS if different to the above. Cheers FC -- Please post to: Hampshire@mailman.lug.org.uk Web Interface: https://mailman.lug.org.uk/mailman/listinfo/hampshire LUG URL: http://www.hantslug.org.uk -- -- Please post to: Hampshire@mailman.lug.org.uk Web Interface: https://mailman.lug.org.uk/mailman/listinfo/hampshire LUG URL: http://www.hantslug.org.uk --
Re: [Hampshire] Sorry for the cross post but you need to read this.
On 19/01/12 09:44, Daniel Pina wrote: My ubuntu doesn't react to ctrl + alt + * either my ubuntu 10.04.3 does not react either -- alan cocks -- Please post to: Hampshire@mailman.lug.org.uk Web Interface: https://mailman.lug.org.uk/mailman/listinfo/hampshire LUG URL: http://www.hantslug.org.uk --
Re: [Hampshire] Sorry for the cross post but you need to read this.
On Thu, Jan 19 at 09:30, Freaky Clown wrote: I dont normally let out stuff like this, but thought you lot should known. So far confirmed with: Gentoo Not on two gentoo boxes tested here, one with X.Org X Server 1.10.4 and one with X.Org X Server 1.11.2 -- Bob Dunlop -- Please post to: Hampshire@mailman.lug.org.uk Web Interface: https://mailman.lug.org.uk/mailman/listinfo/hampshire LUG URL: http://www.hantslug.org.uk --
Re: [Hampshire] Sorry for the cross post but you need to read this.
Quite clearly an idiots mishap of not checking config files that may have been changed from updated packages. Admin error. I even installed these dists in a vbox to try, editing the xorg files manually and non fell victim to this attack. RTFM maybe? /flame Ian On Thursday 19 January 2012 09:30:44 Freaky Clown wrote: I dont normally let out stuff like this, but thought you lot should known. So far confirmed with: Gentoo Fedora ArchLinux You can kill a locked screen by pressing ctrl+alt+* please try this to see if you are vulnerable to this attack and let the list know your OS if different to the above. Cheers FC -- Please post to: Hampshire@mailman.lug.org.uk Web Interface: https://mailman.lug.org.uk/mailman/listinfo/hampshire LUG URL: http://www.hantslug.org.uk -- -- Please post to: Hampshire@mailman.lug.org.uk Web Interface: https://mailman.lug.org.uk/mailman/listinfo/hampshire LUG URL: http://www.hantslug.org.uk --
