Re: [dev] [PATCH] [slock] React to key release rather than key press events

From: FRIGN <dev_AT_frign.de>
Date: Thu, 28 Jan 2016 15:48:11 +0100

On Thu, 28 Jan 2016 12:42:37 -0200
Brad Luther <bradkluther_AT_gmail.com> wrote:

Hey Brad,

> Say somebody manages to "clamp" any letter or number key without you
> noticing, and you for the better of it cannot type in your password
> (not because it's all-caps, but because it's spamming lots of chars).
>
> So we want the screen to turn red on key down? Any key? Why just shift?
>
> Not that I care too much, but for the sake of consistency I put this out there.

the idea is: If somebody even touches your keyboard, it turns red. That's
the warning.
Say, somebody wants to access your computer and just mashes on the keys
because he thinks slock is just the monitor being on standby.
Now, you will probably say again "yeah, but he would have to hold the
shift key for it not to turn red", but for me, that is too much of an
implication.

There could be situations where that can be exploited, and I'd never
agree to a change for purely cosmetic reasons when it also introduces
possible attack vectors.

Cheers

FRIGN

-- 
FRIGN <dev_AT_frign.de>
Received on Thu Jan 28 2016 - 15:48:11 CET

This archive was generated by hypermail 2.3.0 : Thu Jan 28 2016 - 16:00:22 CET