[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: [debian-knoppix] To Display Program from another computer



On Tue, Mar 11, 2003 at 10:07:21AM +0100, Matthias Wieser said:
> 
> xhost +
> ssh user@othercomputer
>    export DISPLAY=knoppixcomputer:0
>    kmail

Take out the "xhost +" and "export DISPLAY" steps, and it should work,
assuming the server hasn't disabled X11 forwarding in ssh.  If it has,
fix that on the server.

"xhost +" is one of the most horrible security vulnerabilities in the
world.  There is an ancient C program to exploit to that to read
every character you type, no matter what window it's in, and even
passwords that aren't repeated back.  It is only 132 lines, with copious
whitespace and comments.  This is trivial to exploit.  Don't ever type
"xhost +" again.  You're completely defeating the purpose of using ssh
in the first place.


-- 
Shawn McMahon           | All US citizens should immediately start open-
Episode IV Consulting   | signing their email messages as a voluntary act
System Administrator    | of patriotic duty. - Dr. Michael L. Love
and all-around nice guy | http://gnu-darwin.sourceforge.net/war.html

Attachment: pgp6w9g5lph0H.pgp
Description: PGP signature


Reply to: