From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from linserver.romuald.net.eu.org (linserver.romuald.net.eu.org [63.228.150.209]) by speech.braille.uwo.ca (Postfix) with ESMTP id 962E810AEB for ; Wed, 21 Oct 2009 17:05:26 -0400 (EDT) Received: by linserver.romuald.net.eu.org (Postfix, from userid 1000) id 29D072690EB; Wed, 21 Oct 2009 14:05:26 -0700 (MST) Date: Wed, 21 Oct 2009 14:05:26 -0700 From: Gregory Nowak To: "Speakup is a screen review system for Linux." Subject: Re: clipboard integration -- possible security implications Message-ID: <20091021210525.GA9472@romuald.net.eu.org> References: <20091020210034.GB32242@linux1> <4ADEC8D4.2040709@baechler.net> <20091021160241.GA16006@linux1> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii; x-action=pgp-signed Content-Disposition: inline In-Reply-To: <20091021160241.GA16006@linux1> X-PGP-Key: http://www.romuald.net.eu.org/pubkey.asc User-Agent: Mutt/1.5.18 (2008-05-17) X-BeenThere: speakup@braille.uwo.ca X-Mailman-Version: 2.1.12 Precedence: list Reply-To: "Speakup is a screen review system for Linux." List-Id: "Speakup is a screen review system for Linux." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 21 Oct 2009 21:05:28 -0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Wed, Oct 21, 2009 at 11:02:41AM -0500, William Hubbs wrote: > I realize that a number of systems out there are probably single user > home systems, but I don't feel that we can code assuming that speakup > will always only be used on home systems. I would like to add my voice in support of this line of thought. Yes, most systems out there with speakup probably are single user home systems. However, I still think it should be borne in mind that linux-based systems have multiuser abilities by nature, so I personally wouldn't want to see assumptions made in speakup's development which rely on the fact that speakup runs on single user systems only. As a case in point, I mentioned in another thread that I have a couple user accounts on my system for other folks, and one of those is a shell account. Though I mostly access this system over ssh, it does have speakup built into the kernel, so that I could hook up my bns, and troubleshoot any boot issues. Since I mostly use this system over ssh, I don't use speakup's cut/paste feature much on it, but there may be cases where I need to use that feature, where the system is in a multiuser runlevel, which of course could lead to the possibility that someone else could have a look at potentially sensitive content in the clipboard. Just my $0.01 worth. Greg - -- web site: http://www.romuald.net.eu.org gpg public key: http://www.romuald.net.eu.org/pubkey.asc skype: gregn1 (authorization required, add me to your contacts list first) - -- Free domains: http://www.eu.org/ or mail dns-manager@EU.org -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iEYEARECAAYFAkrfd5UACgkQ7s9z/XlyUyCxlACgsCmTPxcrvYXcGbNSZ5Ld4SRF K9wAn0+LyjtHp86rEt5f0Ov8ida6Fzet =7l2I -----END PGP SIGNATURE-----