Okay you're right. One could even boot those PCs with a bootable CD that shows an ubuntu login screen that sends all login data immediatly to someone else.
This Man-In-The-Middle-Attack couldn't even be averted with encryption, since that's simply not practicable. USB-login-keys with encrypted transmission could help. mfg - eth -- possible security issue with locked screen https://launchpad.net/bugs/82052 -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
