Setting to protect gnome-terminal from key logging

Posted by yanychar on Ask Ubuntu See other posts from Ask Ubuntu or by yanychar
Published on 2012-03-24T17:08:42Z Indexed on 2012/03/24 17:37 UTC
Read the original article Hit count: 209

Filed under:

xorg

|

security

Looks like it is easy to log keystrokes of all processes of the same user. A basic keylogger is 'xinput'.

xinput test-xi2

The command generates log of all key-presses. Unfortunately, this includes passwords in gnome-terminal. Googling suggested that grabbing keyboard may prevent other windows from capturing key strokes.

Is there a way to prevent XI2 logging in gnome-terminal? Or is there an X terminal that has this feature?

© Ask Ubuntu or respective owner

Related posts about xorg

Ubuntu 11.04 update fail!

as seen on Ask Ubuntu - Search for 'Ask Ubuntu'
I try to update Ubuntu Natty Narwhal, but I got this error: dpkg: .../xserver-xorg-core_2%3a1.9.99.901+git20110131.be3be758-0ubuntu6_i386.deb miatt xserver-xorg-core-t is tartalmazza: xserver-xorg-core breaks xserver-xorg-video-8 nvidia-current provides xserver-xorg-video-8 and is present and… >>> More
Removing broken packages on distro update (13.04 to 13.10)

as seen on Ask Ubuntu - Search for 'Ask Ubuntu'
i'm kinda new to linux. last night i tried upgrading from 13.04 to 13.10 but i got the "could not calculate" error. i read this question and found this error in the main log: Dist-upgrade failed: 'E:Unable to correct problems, you have held broken packages.' and here's a list of my broken packages… >>> More
Ubuntu 12.10 broken, shutdown while updating

as seen on Ask Ubuntu - Search for 'Ask Ubuntu'
I got the following problem: My PC shutdown while upgrading from 12.04 to 12.10. Everything seems to work but I can't install the missing updates. It always tells me to run apt-get install -f, but when I do so it just says: (It's in German, hope it doesn't matter) Paketlisten werden gelesen... Fertig Abhängigkeitsbaum… >>> More
How can I fix apt-get autoremove wanting to uninstall most of my packages?

as seen on Ask Ubuntu - Search for 'Ask Ubuntu'
I did change my packages in synaptic from manually installed to Automatically (they were not manually installed but automatically). Now they are marked for Autoremove. I tested it with sudo apt-get autoremove and the result is shown below (a reduced version because its almost all packages). I remember… >>> More
MacPorts - Installing Port, Dependencies Failed

as seen on Stack Overflow - Search for 'Stack Overflow'
I am attempting to install xulrunner on OSX 10.6.3 using the following: sudo port install xulrunner However, I am receiving the following error: nat-10-200-136-126:phoneyc-new $ sudo port install xulrunner ---> Computing dependencies for xulrunner ---> Activating zlib @1.2.5_0 Error: The… >>> More

Related posts about security

sudo apt-get update errors

as seen on Ask Ubuntu - Search for 'Ask Ubuntu'
Here is what I get on my terminal when running sudo apt-get update errors. I dont know if the issue is from my sources.list or my proxy setup(have not made any changes to proxies). Thank you for any help in advanced. Ign http://security.ubuntu.com oneiric-security Release.gpg Ign http://security… >>> More
The Security-Developer Gap: Why IT Security Can't Fix Your Security Problems Alone

as seen on Devx - Search for 'Devx'
Two well-known white hats explain how hackers take advantage of security holes left by enterprise application developers. >>> More
The Security-Developer Gap: Why IT Security Can't Fix Your Security Problems Alone

as seen on Internet.com - Search for 'Internet.com'
Two well-known white hats explain how hackers take advantage of security holes left by enterprise application developers. >>> More
StackOverFlowError while creating Mac object on AS400/Java

as seen on Stack Overflow - Search for 'Stack Overflow'
Hello all, I am a newbie to AS400-Java programming. I am trying to create my first program to test the implementation of Message Authentication Code (MAC). I am trying to use the HMACSHA1 hash function. My (Java 1.4) program runs fine on a dev box (V5R4).But fails terribly on the QA box (V5R3). My… >>> More
Google App Engine - Spring Security Issue (java.security.AccessControlException)

as seen on Stack Overflow - Search for 'Stack Overflow'
I'm currently getting the AccessControlException below when I deploy to app engine (I don't see it when I run in my local environment). I'm using GAE 1.3.1, Spring 3.0.1, and Spring Security 3.0.2. Any ideas how to get around this issue? It appears to be an issue with Spring Security trying to get… >>> More