|
Title: Qubes - strong security for desktop computing Post by: AaronM on June 04, 2011, 03:02:26 AM I just came across this article, which answers my pondering about the difficulty of Linux keylogging (answer: it's very easy) :
http://theinvisiblethings.blogspot.com/2011/04/linux-security-circus-on-gui-isolation.html (http://theinvisiblethings.blogspot.com/2011/04/linux-security-circus-on-gui-isolation.html) I saw that the blog author has a Xen/Linux-based OS to solve this problem and provide a secure GUI: http://qubes-os.org/Home.html (http://qubes-os.org/Home.html) Title: Re: Qubes - strong security for desktop computing Post by: error on June 04, 2011, 03:07:08 AM Sure, keylogging is very easy. Getting the keylogger onto someone's computer is very hard.
Title: Re: Qubes - strong security for desktop computing Post by: AaronM on June 04, 2011, 03:22:22 AM The more programs running as that user, the more potential security holes there are to exploit. There is no security in depth.
http://en.wikipedia.org/wiki/Defense_in_depth_%28computing%29 (http://en.wikipedia.org/wiki/Defense_in_depth_%28computing%29) Title: Re: Qubes - strong security for desktop computing Post by: error on June 04, 2011, 03:30:12 AM Though this is more about X, and how much it sucks. It should have been abandoned long ago.
Title: Re: Qubes - strong security for desktop computing Post by: Jaime Frontero on June 04, 2011, 05:04:22 AM couldn't you just enable keyboard assistance (or whatever it's called in windows or MacOS), and use your mouse to enter passwords?
Title: Re: Qubes - strong security for desktop computing Post by: error on June 04, 2011, 05:05:26 AM couldn't you just enable keyboard assistance (or whatever it's called in windows or MacOS), and use your mouse to enter passwords? Sure, but you can swipe mouse events just as easily. Title: Re: Qubes - strong security for desktop computing Post by: Jaime Frontero on June 04, 2011, 05:08:04 AM couldn't you just enable keyboard assistance (or whatever it's called in windows or MacOS), and use your mouse to enter passwords? Sure, but you can swipe mouse events just as easily. hmmm. my understanding is that you can only capture mouse position events, no? use a different keyboard layout every time... |