Re: Why does GNOME take so much time to tell that a screensaver-introduced password is erroneous?
On Mon, 21 Jun 2010 23:11:50 +0100
"Karl E. Jorgensen" <karl@fizzback.net> wrote:
> Hi!
>
> On Mon, Jun 21, 2010 at 05:47:21PM -0400, Celejar wrote:
...
> > Same thing with xscreensaver. I think that a lot of software that asks
> > for a password behaves like this, perhaps to prevent brute-forcing?
> > I'm not sure if brute-forcing is possible on a GUI, though.
>
> I suspect this is simply a problem of aquiring the right tools for the job:
>
> - X events can be generated by software (e.g. the xmacro package). This is
> evident if you use VNC to control a remote machine: the screen saver is
> none-the-wiser to the fact that you are remote.
>
> - USB keyboards can probably be simulated by other devices. I would not be
> surprised to find linux tools that allow a PC to act as a USB device, rather
> than USB "master". From here on, it is just software again.
>
> and probably lots of other ways...
Good points; I should have realized this.
Celejar
--
foffl.sourceforge.net - Feeds OFFLine, an offline RSS/Atom aggregator
mailmin.sourceforge.net - remote access via secure (OpenPGP) email
ssuds.sourceforge.net - A Simple Sudoku Solver and Generator
Reply to: