trinity-users@lists.pearsoncomputing.net

Message: previous - next
Month: January 2012

Re: [trinity-users] avoid "Ctrl-Ald-Del" in screen unlock dialog

From: "Timothy Pearson" <kb9vqf@...>
Date: Tue, 3 Jan 2012 15:31:17 -0600
> Hi Timothy !
>
> To be honest I don't understand why is this "Ctrl-Alt-Del" dialog window
> good for security. What kind of attack is prevented by it?
>
> Cheers,
>
> Ilya

Hi Ilya,

Login spoofing.  http://en.wikipedia.org/wiki/Login_spoofing

In a nutshell TDE intercepts ctrl+alt+del at a very low level, making it
impossible for a non-privileged user to ever see the keystroke.  Two TDE
applications are then granted the ability to see the keystroke,
specifically KDM and the desktop locker.  Any other application will be
oblivious to the fact that ctrl+alt+del was pressed, making it impossible
to create a behaviourally accurate copy of the login screen.

Tim