Might be a good move
Might be a good move
Posted Jun 24, 2025 21:36 UTC (Tue) by Cyberax (✭ supporter ✭, #52523)In reply to: Might be a good move by linuxrocks123
Parent article: GNOME deepens systemd dependencies
> Sure, I guess theoretically you could buffer overflow the username or password field
Some password greeters can do remote calls to LDAP, there can be greeters that can do a 3D scan of your face with a call to a remote service to validate it, etc. That's quite a sizeable attack surface.
And I have personally seen a greeter that opens a browser and does an SSO login to retrieve the user's details.