Re: User sessions, system request

[Jonathan S. Shapiro]

On Wed, 2008-01-30 at 22:46 +0100, Bas Wijnen wrote:
> As you seem to agree, Alt+SysRq may be designed for the purpose, but it
> is badly designed and should not be used for it.

No, I do not agree with this. Yes, I agree it would be better if SysRq
did not require ALT. No, I do not agree that the current design is a
serious problem.

> > This is the right goal. The problem is to ensure that a "normal" program
> > cannot simulate a password box well enough to fool the user into
> > entering a password into an unauthorized program.
> 
> The user needs to be educated for this: when entering a password,
> _always_ press break first.

Actually, that isn't necessary. There are ways to design a window
manager to provide visual feedback confirming that a trusted window has
focus.


shap