Re: [Full-Disclosure] Re: Xfree86 video buffering?

["Esler, Joel CNTR/Sytex" <joel.esler@xxxxxxxxxxxxxxxx>]

While I agree that his is an issue.  However I don't feel it's a
security issue.  It's more a "fix the driver damn it issue"...  

If you can go through all the trouble to set up a camera, or physically
sit and see a few seconds worth of XFree Blink..  You most likely have
physical access anyway.  

Physical Access = root.

Fix the driver.  End of story.

On Fri, 2005-02-25 at 22:58 +0300, phased wrote:

> If someone has access to your machine, and can make it crash so they can see
> what you were doing, someone mentioned this is local infomation disclosure...
> they could just look over your shoulder while you were using the machine or 
> install a mini camera someplace in the room, zoom in on your monitor and
> acheive much better results.
> 
> -----Original Message-----
> From: Stan Bubrouski <stan.bubrouski@xxxxxxxxx>
> To: "Riad S. Wahby" <rsw@xxxxxxxx>
> Date: Fri, 25 Feb 2005 13:33:21 -0500
> Subject: [Full-Disclosure] Re: Xfree86 video buffering?
> 
> > 
> > Riad S. Wahby wrote:
> > 
> > >Stan Bubrouski <stan.bubrouski@xxxxxxxxx> wrote:
> > >  
> > >
> > >>Umm I didn't offer a solution at all? 
> > >>    
> > >>
> > >
> > >Are you making a statement or asking a question?
> > >
> > >  
> > >
> > Umm more like wondering what you're talking about.
> > 
> > >>I clearly said I wasn't wise enough to devise a solution for this...
> > >>which is why I said I'll leave a solution to the experts...
> > >>    
> > >>
> > >
> > >It's fairly obvious that you either have to do it at shutdown or at
> > >startup.  When else are you going to do it, while the user is viewing
> > >the screen?
> > >
> > >  
> > >
> > I wasn't making a case for either argument.
> > 
> > >Also, you seem to have taken my email as a personal attack.  Calm down,
> > >dude.  I was participating in a discussion, not holding up a giant "Stan
> > >is stupid" sign.
> > >
> > >  
> > >
> > Go ahead and hold up a sign doesn't bother me, if it did I wouldn't be 
> > posting to public mailling lists.
> > But if you think I'm sitting here steaming about it your barking up the 
> > wrong tree :-P
> > 
> > I think you're simply inferring too much from what I'm saying.  That's all.
> > 
> > Best Regards,
> > 
> > sb
> > _______________________________________________
> > Full-Disclosure - We believe in it.
> > Charter: http://lists.netsys.com/full-disclosure-charter.html
> > 
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html

-- 
Esler, Joel CNTR/Sytex <joel.esler@xxxxxxxxxxxxxxxx>

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html