Re: Fake login screens

2009-02-15 Thread Dotan Cohen
However, it seems to me that nobody is getting the point about fake login screens: if I am an *user* of somebody else's network, how can I protect myself from another *user* faking a login screen, used as the only running X application, and stealing my password? You have evidence that such

Re: Fake login screens

2009-02-15 Thread Mackenzie Morgan
On Sunday 15 February 2009 3:12:32 am Dotan Cohen wrote: No, Jaunty simply won't have C-A-B feature enabled by default. Simple as that. Release notes doesn't have such speculation as OMG, visual interface have changed, someone could use it to steal information from people. This is a

Alt-SysReq-K in some cases nonfunctional.

2009-02-15 Thread Mike Jones
Dane, Please see my bug-report on launchpad filed as https://bugs.launchpad.net/bugs/329644 Additionally, Could someone please explain to me what REISUB is? I have never heard this term before, and as I said before, I am a programmer by trade, with better than just basic knowledge

Re: Alt-SysReq-K in some cases nonfunctional.

2009-02-15 Thread Alan Pope
2009/2/15 Mike Jones eternal...@gmail.com: Could someone please explain to me what REISUB is? I have never heard this term before, and as I said before, I am a programmer by trade, with better than just basic knowledge about operating systems and such, so I am a bit thrown off. It's the

Re: Fake login screens

2009-02-15 Thread Dotan Cohen
This is a basic system event that has changed, a system event that has security and usability implications. Furthermore, this deviates from the behaviour of every other major Linux distro, and from the behaviour of Ubuntu itself in previous versions. False. This is an upstream change.

Re: CAB loss, fake logins etc

2009-02-15 Thread Alan Pope
2009/2/15 Alex Cockell alcock...@eclipse.co.uk: Umm -please forgive me, but you mention that removing the Ctrl-Alt-Backspace three-key-salute was proposed for removal two years ago... Has this been made absolutely clear to preinstall manufacturers in time for them to print new manuals? This

Re: Fake login screens

2009-02-15 Thread Vincenzo Ciancia
On 14/02/2009 Thomas Jaeger wrote: C-A-B offers no protection against this attack, as users can easily remap keys. If you don't believe me, run xmodmap -e 'keycode 22 = ' Therefore, I was completely wrong along the last 10 years (and fancy how many passwords I gave as a gift to my

Re: Fake login screens

2009-02-15 Thread Vincenzo Ciancia
On 15/02/2009 Mackenzie Morgan wrote: the kernel *does* intercept Alt+SysRq+K as pointed out a billion times already. Seriously, we have a userspace and a kernelspace way around this one. This is obviously not working from X11, so it seems like we don't have a secure access key under the

Re: Alt-SysReq-K in some cases nonfunctional.

2009-02-15 Thread Martin Olsson
Mike Jones wrote: Additionally, Could someone please explain to me what REISUB is? I have never heard this term before, and as I said before, I am a programmer by trade, with better than just basic knowledge about operating systems and such, so I am a bit thrown off. Each letter

Re: [RFC] apturl repository whitelist application process

2009-02-15 Thread (``-_-´´) -- BUGabundo
Olá Alexander e a todos. On Friday 13 February 2009 11:16:39 Alexander Sack wrote: Some repos will want to replace system packages (eg medibuntu)...this seems incompatible with these requirements. I am not sure what medibuntu does. Is that a derivate? Its a 3rd party repo with license

Re: Is disabling ctrl-alt-backspace really such a good idea? - no.

2009-02-15 Thread (``-_-´´) -- BUGabundo
Olá John e a todos. On Friday 13 February 2009 02:08:35 John Moser wrote: (read: Firefox RELOADS the tab it was in, it doesn't come back up into the exact same state it shut down in! This sucks!) Give TabMix Plus (session saver feature) Firefox addon a try. it restores everything to me,

Re: Fwd: Is disabling ctrl-alt-backspace really such a good idea? - no.

2009-02-15 Thread (``-_-´´) -- BUGabundo
Olá Matthew e a todos. On Friday 13 February 2009 18:27:06 Matthew Paul Thomas wrote: I have no doubt that it could be solved if people put their minds to it. System Monitor (or a process-specific buset) could reduce the priority of your other programs whenever it is running, be special-cased

Re: improving compiled modules of kernel - per-user (was Reasons Why Jaunty Will Not Ship With 2.6.29)

2009-02-15 Thread Oliver Grawert
hi, On Do, 2009-02-12 at 14:48 +, Scott James Remnant wrote: I'd do something like: - iterate /sys, looking for the devices - track to their drivers (either by looking at what's loaded, or comparing modalias to MODULE_DEVICE_TABLE) isnt that what MODULES=dep in /etc/initramfs.conf

Re: Fake login screens

2009-02-15 Thread Remco
On Sun, Feb 15, 2009 at 2:22 PM, Matthew Garrett mj...@srcf.ucam.org wrote: Arguing that something's a security feature without checking that it's actually a security feature isn't a good plan. Obviously. But I do think this is a security issue that needs to be solved. Let's forget the whole

RE: improving compiled modules of kernel - per-user (was Reasons Why Jaunty Will Not Ship With 2.6.29)

2009-02-15 Thread Stefan Hamminga
-Original Message- hi, On Do, 2009-02-12 at 14:48 +, Scott James Remnant wrote: I'd do something like: - iterate /sys, looking for the devices - track to their drivers (either by looking at what's loaded, or comparing modalias to MODULE_DEVICE_TABLE) isnt that what

Re: Is disabling ctrl-alt-backspace really such a good idea? - no.

2009-02-15 Thread Dylan McCall
Re: SysRQ not working. Try it in a virtual terminal and see if that works (something harmless, like Alt SysRQ M). For starters, the SysRQ / Print Screen key becomes SysRQ when Alt is being pressed. If you change the GNOME keyboard settings you could find different results. Is it possible that

Subject: Alt-SysReq-K in some cases nonfunctional

2009-02-15 Thread Jeff Hanson
From: Mike Jones eternal...@gmail.com Subject: Alt-SysReq-K in some cases nonfunctional. To: ubuntu-devel-discuss@lists.ubuntu.com, dmutt...@gmail.com Message-ID: e0512b330902150051l41d272cek3400369c29ba6...@mail.gmail.com Content-Type: text/plain; charset=iso-8859-1 Dane,

Re: improving compiled modules of kernel - per-user

2009-02-15 Thread (``-_-´´) -- BUGabundo
Olá Stefan e a todos. On Sunday 15 February 2009 15:56:32 Stefan Hamminga wrote: Here is what I've got so far: for mod in `((lspci -v | grep -i Kernel driver in use: | cut -b 24-) (lspci -v | grep -i Kernel modules: | cut -b 18-)) | sort -u` ; do echo `grep $mod $(find -name

RE: improving compiled modules of kernel - per-user

2009-02-15 Thread Stefan Hamminga
-Original Message- Olá Stefan e a todos. On Sunday 15 February 2009 15:56:32 Stefan Hamminga wrote: Here is what I've got so far: for mod in `((lspci -v | grep -i Kernel driver in use: | cut -b 24-) (lspci -v | grep -i Kernel modules: | cut -b 18-)) | sort -u` ; do

Re: Is disabling ctrl-alt-backspace really such a good idea? - no.

2009-02-15 Thread Mackenzie Morgan
On Sunday 15 February 2009 12:24:32 pm Dylan McCall wrote: Re: SysRQ not working. Try it in a virtual terminal and see if that works (something harmless, like Alt SysRQ M). For starters, the SysRQ / Print Screen key becomes SysRQ when Alt is being pressed. Don't you mean when Fn is being

Re: Is disabling ctrl-alt-backspace really such a good idea? - no.

2009-02-15 Thread Dane Mutters
On Sun, 2009-02-15 at 15:50 -0500, Mackenzie Morgan wrote: On Sunday 15 February 2009 12:24:32 pm Dylan McCall wrote: Re: SysRQ not working. Try it in a virtual terminal and see if that works (something harmless, like Alt SysRQ M). For starters, the SysRQ / Print Screen key becomes SysRQ

Notable Changes to Jaunty's PulseAudio

2009-02-15 Thread Dan Chen
Hi all, This morning's upload of PulseAudio to jaunty makes two notable changes for the desktop user: Firstly, autospawn is now enabled, which means that if the daemon is not running when the first client attempts to connect, it will be executed automatically. This step tests a workaround for