[Dx-packages] [Bug 1348668] Re: Unity lockscreen lets applications capture keyboard input
*** This bug is a duplicate of bug 1349128 *** https://bugs.launchpad.net/bugs/1349128 Status changed to 'Confirmed' because the bug affects multiple users. ** Changed in: unity (Ubuntu) Status: New = Confirmed -- You received this bug notification because you are a member of DX Packages, which is subscribed to unity in Ubuntu. Matching subscriptions: dx-packages https://bugs.launchpad.net/bugs/1348668 Title: Unity lockscreen lets applications capture keyboard input Status in Unity: New Status in “unity” package in Ubuntu: Confirmed Bug description: I noticed that with the Vimium extension activated in Google Chrome, I cannot unlock Unity's lockscreen because keyboard input is hijacked by Vimium. The lockscreen really should not let this happen, and it can even be considered a potential security vulnerability as it might allow applications to capture a user's password. I have noticed this before as well when using another application, though I can't remember which one it was at the moment. The workaround is to use the mouse to choose the Switch user-option, but this is really not obvious to anyone who might encounter this bug. To manage notifications about this bug go to: https://bugs.launchpad.net/unity/+bug/1348668/+subscriptions -- Mailing list: https://launchpad.net/~dx-packages Post to : dx-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~dx-packages More help : https://help.launchpad.net/ListHelp
[Dx-packages] [Bug 1348668] Re: Unity lockscreen lets applications capture keyboard input
*** This bug is a duplicate of bug 1349128 *** https://bugs.launchpad.net/bugs/1349128 ** This bug is no longer a duplicate of bug 1345505 Password typed to unlock the screen is sent to the Chrome window if it had a text selection ** This bug has been marked a duplicate of bug 1349128 Ubuntu 14.04 lock screen doesn't accept keyboard input (until using indicators) -- You received this bug notification because you are a member of DX Packages, which is subscribed to unity in Ubuntu. Matching subscriptions: dx-packages https://bugs.launchpad.net/bugs/1348668 Title: Unity lockscreen lets applications capture keyboard input Status in Unity: New Status in “unity” package in Ubuntu: New Bug description: I noticed that with the Vimium extension activated in Google Chrome, I cannot unlock Unity's lockscreen because keyboard input is hijacked by Vimium. The lockscreen really should not let this happen, and it can even be considered a potential security vulnerability as it might allow applications to capture a user's password. I have noticed this before as well when using another application, though I can't remember which one it was at the moment. The workaround is to use the mouse to choose the Switch user-option, but this is really not obvious to anyone who might encounter this bug. To manage notifications about this bug go to: https://bugs.launchpad.net/unity/+bug/1348668/+subscriptions -- Mailing list: https://launchpad.net/~dx-packages Post to : dx-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~dx-packages More help : https://help.launchpad.net/ListHelp
[Dx-packages] [Bug 1348668] Re: Unity lockscreen lets applications capture keyboard input
I can confirm this too, the first time it happened I freaked out, my workaround is to change input methods in the icon in the top panel. But this should be like this, I agree that no lockscreen should behave like this. This only happens with Google Chrome. As I have the vimium extension too I find to my surprise that I was opening a web page with half of my password on it. I mean, c'mon that's not secure. -- You received this bug notification because you are a member of DX Packages, which is subscribed to unity in Ubuntu. Matching subscriptions: dx-packages https://bugs.launchpad.net/bugs/1348668 Title: Unity lockscreen lets applications capture keyboard input Status in “unity” package in Ubuntu: New Bug description: I noticed that with the Vimium extension activated in Google Chrome, I cannot unlock Unity's lockscreen because keyboard input is hijacked by Vimium. The lockscreen really should not let this happen, and it can even be considered a potential security vulnerability as it might allow applications to capture a user's password. I have noticed this before as well when using another application, though I can't remember which one it was at the moment. The workaround is to use the mouse to choose the Switch user-option, but this is really not obvious to anyone who might encounter this bug. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/unity/+bug/1348668/+subscriptions -- Mailing list: https://launchpad.net/~dx-packages Post to : dx-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~dx-packages More help : https://help.launchpad.net/ListHelp
[Dx-packages] [Bug 1348668] Re: Unity lockscreen lets applications capture keyboard input
Good to know. From the back of my mind, I can confirm that running Firefox, vim, Terminator, or Gedit in the foreground does not affect the lock screen. In other words the bug lies with the interaction between Unity Lockscreen and Google Chrome. Also, related to my previous comment, forget what I wrote there. I think `workaround-screen-lock-malfunction_1_all.deb` is meant to fix something else, and so is totally unrelated to this bug. I have had the issue after installing it. -- You received this bug notification because you are a member of DX Packages, which is subscribed to unity in Ubuntu. Matching subscriptions: dx-packages https://bugs.launchpad.net/bugs/1348668 Title: Unity lockscreen lets applications capture keyboard input Status in “unity” package in Ubuntu: New Bug description: I noticed that with the Vimium extension activated in Google Chrome, I cannot unlock Unity's lockscreen because keyboard input is hijacked by Vimium. The lockscreen really should not let this happen, and it can even be considered a potential security vulnerability as it might allow applications to capture a user's password. I have noticed this before as well when using another application, though I can't remember which one it was at the moment. The workaround is to use the mouse to choose the Switch user-option, but this is really not obvious to anyone who might encounter this bug. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/unity/+bug/1348668/+subscriptions -- Mailing list: https://launchpad.net/~dx-packages Post to : dx-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~dx-packages More help : https://help.launchpad.net/ListHelp
[Dx-packages] [Bug 1348668] Re: Unity lockscreen lets applications capture keyboard input
That affects different Google Chrome inputs. Address bar, Google search bar, Google Keep inputs and so on. It's not limited to a special extension. (I use a Zenbook Prime UX31A with Ubuntu 14.04 running.) Maybe other programs are affected too, but I don't think so. Can't reproduce it with Gedit for example. -- You received this bug notification because you are a member of DX Packages, which is subscribed to unity in Ubuntu. Matching subscriptions: dx-packages https://bugs.launchpad.net/bugs/1348668 Title: Unity lockscreen lets applications capture keyboard input Status in “unity” package in Ubuntu: New Bug description: I noticed that with the Vimium extension activated in Google Chrome, I cannot unlock Unity's lockscreen because keyboard input is hijacked by Vimium. The lockscreen really should not let this happen, and it can even be considered a potential security vulnerability as it might allow applications to capture a user's password. I have noticed this before as well when using another application, though I can't remember which one it was at the moment. The workaround is to use the mouse to choose the Switch user-option, but this is really not obvious to anyone who might encounter this bug. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/unity/+bug/1348668/+subscriptions -- Mailing list: https://launchpad.net/~dx-packages Post to : dx-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~dx-packages More help : https://help.launchpad.net/ListHelp
[Dx-packages] [Bug 1348668] Re: Unity lockscreen lets applications capture keyboard input
** Information type changed from Private Security to Public -- You received this bug notification because you are a member of DX Packages, which is subscribed to unity in Ubuntu. Matching subscriptions: dx-packages https://bugs.launchpad.net/bugs/1348668 Title: Unity lockscreen lets applications capture keyboard input Status in “unity” package in Ubuntu: New Bug description: I noticed that with the Vimium extension activated in Google Chrome, I cannot unlock Unity's lockscreen because keyboard input is hijacked by Vimium. The lockscreen really should not let this happen, and it can even be considered a potential security vulnerability as it might allow applications to capture a user's password. I have noticed this before as well when using another application, though I can't remember which one it was at the moment. The workaround is to use the mouse to choose the Switch user-option, but this is really not obvious to anyone who might encounter this bug. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/unity/+bug/1348668/+subscriptions -- Mailing list: https://launchpad.net/~dx-packages Post to : dx-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~dx-packages More help : https://help.launchpad.net/ListHelp
