Re: Fake login screens

2009-02-15 Thread Dotan Cohen
>> However, it seems to me that nobody is getting the point about fake >> login screens: if I am an *user* of somebody else's network, how can I >> protect myself from another *user* faking a login screen, used as the >> only running X application, and stealing my password? > > You have evidence th

Re: Fake login screens

2009-02-15 Thread Mackenzie Morgan
On Sunday 15 February 2009 3:12:32 am Dotan Cohen wrote: > > No, Jaunty simply won't have C-A-B feature enabled by default. Simple > > as that. Release notes doesn't have such speculation as "OMG, visual > > interface have changed, someone could use it to steal information from > > people". > > >

Alt-SysReq-K in some cases nonfunctional.

2009-02-15 Thread Mike Jones
Dane, Please see my bug-report on launchpad filed as https://bugs.launchpad.net/bugs/329644 Additionally, Could someone please explain to me what REISUB is? I have never heard this term before, and as I said before, I am a programmer by trade, with better than just basic knowledge a

Re: Alt-SysReq-K in some cases nonfunctional.

2009-02-15 Thread Alan Pope
2009/2/15 Mike Jones : > Could someone please explain to me what REISUB is? I have never heard > this term before, and as I said before, I am a programmer by trade, with > better than just basic knowledge about operating systems and such, so I am a > bit thrown off. > It's the sequence of lett

Re: Fake login screens

2009-02-15 Thread Dotan Cohen
>> This is a basic system event that has changed, a system event that has >> security and usability implications. Furthermore, this deviates from >> the behaviour of every other major Linux distro, and from the >> behaviour of Ubuntu itself in previous versions. > > False. This is an upstream chan

Re: CAB loss, fake logins etc

2009-02-15 Thread Alan Pope
2009/2/15 Alex Cockell : > Umm -please forgive me, but you mention that removing the > Ctrl-Alt-Backspace three-key-salute was proposed for removal two years > ago... Has this been made absolutely clear to preinstall manufacturers > in time for them to print new manuals? > This discussion is abou

Re: Fake login screens

2009-02-15 Thread Vincenzo Ciancia
On 14/02/2009 Thomas Jaeger wrote: > C-A-B offers no protection against this attack, as users can easily > remap keys. If you don't believe me, run > > xmodmap -e 'keycode 22 = ' > Therefore, I was completely wrong along the last 10 years (and fancy how many passwords I gave as a gift to my co

Re: Fake login screens

2009-02-15 Thread Vincenzo Ciancia
On 15/02/2009 Mackenzie Morgan wrote: > the kernel *does* intercept > Alt+SysRq+K as pointed out a billion times already. Seriously, we > have a > userspace and a kernelspace way around this one. This is obviously not working from X11, so it seems like we don't have a secure access key under

Re: Alt-SysReq-K in some cases nonfunctional.

2009-02-15 Thread Martin Olsson
Mike Jones wrote: > Additionally, > > Could someone please explain to me what REISUB is? I have never > heard this term before, and as I said before, I am a programmer by > trade, with better than just basic knowledge about operating systems and > such, so I am a bit thrown off. Each l

Re: Fake login screens

2009-02-15 Thread Matthew Garrett
On Sat, Feb 14, 2009 at 06:54:03PM +0100, Vincenzo Ciancia wrote: > However, it seems to me that nobody is getting the point about fake > login screens: if I am an *user* of somebody else's network, how can I > protect myself from another *user* faking a login screen, used as the > only running

Re: [RFC] apturl repository whitelist application process

2009-02-15 Thread (``-_-´´) -- BUGabundo
Olá Alexander e a todos. On Friday 13 February 2009 11:16:39 Alexander Sack wrote: > > Some repos will want to replace system packages (eg medibuntu)...this > > seems incompatible with these requirements. > > I am not sure what medibuntu does. Is that a derivate? Its a 3rd party repo with licens

Re: [RFC] apturl repository whitelist application process

2009-02-15 Thread (``-_-´´) -- BUGabundo
Olá Alexander e a todos. On Thursday 12 February 2009 10:24:49 Alexander Sack wrote: > However, if necessary, the repository may actually be removed from the > users' sources lists. This may be necessary if there are severe > problems on the repository such as data lose errors, security > problems

Re: improving compiled modules of kernel - per-user (was Reasons Why Jaunty Will Not Ship With 2.6.29)

2009-02-15 Thread (``-_-´´) -- BUGabundo
Olá Scott e a todos. On Thursday 12 February 2009 14:48:11 Scott James Remnant wrote: > On Thu, 2009-02-12 at 11:15 +, (``-_-´´) -- BUGabundo wrote: > > Hope I dont start a flame war here, but is there any *easy* way for > > non-devel-but-somewhat-advanced-users to pick the _current_ installe

Re: Is disabling ctrl-alt-backspace really such a good idea? - no.

2009-02-15 Thread (``-_-´´) -- BUGabundo
Olá John e a todos. On Friday 13 February 2009 02:08:35 John Moser wrote: > (read: Firefox RELOADS the tab it was in, it doesn't come back up into the > exact same state it shut down in! This sucks!) Give TabMix Plus (session saver feature) Firefox addon a try. it restores everything to me, ev

Re: Fwd: Is disabling ctrl-alt-backspace really such a good idea? - no.

2009-02-15 Thread (``-_-´´) -- BUGabundo
Olá Matthew e a todos. On Friday 13 February 2009 18:27:06 Matthew Paul Thomas wrote: > I have no doubt that it could be solved if people put their minds to > it. System Monitor (or a process-specific buset) could reduce the > priority of your other programs whenever it is running, be special-case

Re: improving compiled modules of kernel - per-user (was Reasons Why Jaunty Will Not Ship With 2.6.29)

2009-02-15 Thread Oliver Grawert
hi, On Do, 2009-02-12 at 14:48 +, Scott James Remnant wrote: > I'd do something like: > > - iterate /sys, looking for the devices > - track to their drivers (either by looking at what's loaded, or >comparing modalias to MODULE_DEVICE_TABLE) isnt that what MODULES=dep in /etc/initramfs.co

Re: Fake login screens

2009-02-15 Thread Remco
On Sun, Feb 15, 2009 at 2:22 PM, Matthew Garrett wrote: > Arguing that something's a security feature without checking that it's > actually a security feature isn't a good plan. Obviously. But I do think this is a security issue that needs to be solved. Let's forget the whole C-A-B discussion. We

RE: improving compiled modules of kernel - per-user (was Reasons Why Jaunty Will Not Ship With 2.6.29)

2009-02-15 Thread Stefan Hamminga
-Original Message- > hi, > On Do, 2009-02-12 at 14:48 +, Scott James Remnant wrote: > > I'd do something like: > > > - iterate /sys, looking for the devices > > - track to their drivers (either by looking at what's loaded, or > >comparing modalias to MODULE_DEVICE_TABLE) > isnt t

Re: Is disabling ctrl-alt-backspace really such a good idea? - no.

2009-02-15 Thread Dylan McCall
Re: SysRQ not working. Try it in a virtual terminal and see if that works (something harmless, like Alt SysRQ M). For starters, the SysRQ / Print Screen key becomes SysRQ when Alt is being pressed. If you change the GNOME keyboard settings you could find different results. Is it possible that whe

Subject: Alt-SysReq-K in some cases nonfunctional

2009-02-15 Thread Jeff Hanson
> From: Mike Jones > Subject: Alt-SysReq-K in some cases nonfunctional. > To: ubuntu-devel-discuss@lists.ubuntu.com, dmutt...@gmail.com > Message-ID: > > Content-Type: text/plain; charset="iso-8859-1" > > Dane, > >Please see my bug-report on launchpad filed as > > https://bugs.launchpa

Re: improving compiled modules of kernel - per-user

2009-02-15 Thread (``-_-´´) -- BUGabundo
Olá Stefan e a todos. On Sunday 15 February 2009 15:56:32 Stefan Hamminga wrote: > Here is what I've got so far: > > for mod in `((lspci -v | grep -i "Kernel driver in use: " | cut -b 24-) && > (lspci -v | grep -i "Kernel modules: " | cut -b 18-)) | sort -u` ; do > echo `grep $mod $(find

RE: improving compiled modules of kernel - per-user

2009-02-15 Thread Stefan Hamminga
-Original Message- > Olá Stefan e a todos. > On Sunday 15 February 2009 15:56:32 Stefan Hamminga wrote: > > Here is what I've got so far: > > > > for mod in `((lspci -v | grep -i "Kernel driver in use: " | cut -b 24-) && > > (lspci -v | grep -i "Kernel modules: " | cut -b 18-)) | sort -u

Re: Is disabling ctrl-alt-backspace really such a good idea? - no.

2009-02-15 Thread Mackenzie Morgan
On Sunday 15 February 2009 12:24:32 pm Dylan McCall wrote: > Re: SysRQ not working. Try it in a virtual terminal and see if that > works (something harmless, like Alt SysRQ M). > > For starters, the SysRQ / Print Screen key becomes SysRQ when Alt is > being pressed. Don't you mean when Fn is bein

Re: Is disabling ctrl-alt-backspace really such a good idea? - no.

2009-02-15 Thread Dane Mutters
On Sun, 2009-02-15 at 15:50 -0500, Mackenzie Morgan wrote: > On Sunday 15 February 2009 12:24:32 pm Dylan McCall wrote: > > Re: SysRQ not working. Try it in a virtual terminal and see if that > > works (something harmless, like Alt SysRQ M). > > > > For starters, the SysRQ / Print Screen key becom

Notable Changes to Jaunty's PulseAudio

2009-02-15 Thread Dan Chen
Hi all, This morning's upload of PulseAudio to jaunty makes two notable changes for the desktop user: Firstly, autospawn is now enabled, which means that if the daemon is not running when the first client attempts to connect, it will be executed automatically. This step tests a workaround for