full-disclosure - Xfree86 video buffering?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <421E7E10.4060502@digitalmunition.com>
From: kf_lists at digitalmunition.com (KF (Lists))
Subject: Xfree86 video buffering?

> 
> All kidding aside, this seems to be a real security issue. Your system
> shouldn't be showing unauthorized users what you were doing. It should
> properly flush the memory.

I do have a movie clip showing a session where root was viewing the 
/etc/shadow file. The shadow is displayed on the screen for about 5 
seconds before the KDM login pops up. Ask if you want to actually SEE 
this in action just ask and I'll mail it to ya.

> 
> Does a power off flush it?

I have power cycled at least one of the machines and let it sit for 
several minutes. Also as I stated before sometimes when I get up in the 
morning I catch glimpses of stuff I viewed just prior to shutting the 
machine down for the night.

Several folks have mentioned it could be related to the ram chips on the 
video card.

-KF