[Search for users] [Overall Top Noters] [List of all Conferences] [Download this site]

Conference bulova::decw_jan-89_to_nov-90

Title:DECWINDOWS 26-JAN-89 to 29-NOV-90
Notice:See 1639.0 for VMS V5.3 kit; 2043.0 for 5.4 IFT kit
Moderator:STAR::VATNE
Created:Mon Oct 30 1989
Last Modified:Mon Dec 31 1990
Last Successful Update:Fri Jun 06 1997
Number of topics:3726
Total number of notes:19516

362.0. "security problem ?" by 2HOT::DESAI (Jatin Desai) Wed Mar 08 1989 18:10

If a client is slow in displaying a modal dialog box, the dialog box may show up
on top of the pause screen. For example, start Notepad on a remote (slow) link.
Chooes Open... menu from file and before it displays the open dialog box,
pause the workstation using the Pause menu of the sesison manager.

The pause screen will be displayed and on top of it, the open dialog box,
with ALL my .TXT files for the WORLD to look at! Since the server is grabbed,
the dialog box doesn't respond to keyboard or mouse (thank god).

Seems like a serious security problem to me.

Jatin

T.RTitleUserPersonal
Name
DateLines
362.1QAR itDECWIN::FISHERBurns Fisher 381-1466, ZKO3-4/W23Fri Mar 10 1989 21:456
    Yukko.  I'm not quite sure how the pause works, but nothing should be
    able to push above it.  Please QAR the problem.
    
    Burns
    

362.2Clock messages show up on top alsoVIA::FINNEGANAll of the best intentions are less than one good act.Sat Mar 11 1989 15:4111
    FYI, the clock alarm message can get on top of the pause screen.
    
    If you have an alarm that goes off while the screen is paused, then the
    popup message shows up on top of the pause screen.  I actually use this
    to show where I am but I can see where some people may consider it a
    security hole.
    
    I believe calendar has the same "feature".
    
    Neal

362.3VIA::DESAIJatin DesaiSun Mar 12 1989 21:148
re: .1

Already QARed. Seems like all modal dialog boxes are displayed on top of the
pause screen (and override redirect windows which is a superset).

Jatin