[Secure-testing-team] Re: kernel allows loadkeys to be used by any user, allowing for local root compromise

Krzysztof Halasa khc at pm.waw.pl
Wed Oct 19 22:57:40 UTC 2005


Rudolf Polzer <debian-ne at durchnull.de> writes:

> That's the only thing that might actually work - an inductive device wrapped
> around the keyboard cable. But I've never seen those available ready to buy.

There are simpler designs - it's just a serial line, right? A simple
"dongle" can send data from the keyboard to a notebook. With luck two
wires would do (using parallel port for sampling data).

Anyway I wouldn't count on people's reaction when they see someone doing
something unusual.
-- 
Krzysztof Halasa




More information about the Secure-testing-team mailing list