Hello, Regarding bug #529306, there is a possible detection of the xauth magic-cookie. The attached debdiff file adds two patches to the current slim package in Lenny. The first that instead of setting the mcookie within the command line of xauth, it passes it through a pipe. The second that instead of using the pid+time to generate a random mcookie, uses srandom to make the cookie less predictable.
Regards Mike
slim_1.3.0-1+lenny2.debdiff
Description: Binary data