Re: X-windows security in Gnome

[Havoc Pennington <hp redhat com>]

Brian Cameron <Brian Cameron Sun COM> writes: 
> Another example is xterm
> comes with a "secure keyboard" mode (just hold down the control
> key and the left mouse button at the same time to see this option).
> According to xterm's man page, this option is supposed to make
> it impossible for other programs to see passwords entered when
> telnet'ing, rsh'ing, etc.  However it doesn't work because 
> the xspy program demonstrates that XGrabKeyboard isn't a secure
> solution.  

This is why gnome-terminal doesn't have a "secure keyboard" feature,
because that feature is bullshit. ;-)

If someone can connect to your display, you are screwed. End of story.
Don't let them connect.

Havoc