4 ms·
Browsers need the equivalent of a secure attention sequence[0]. [0] https://en.wikipedia.org/wiki/Secure_attention_key https://en.wikipedia.org/wiki/Secure_att
by EvanAnderson 5y ago
Browsers need the equivalent of a secure attention sequence[0].
[0] https://en.wikipedia.org/wiki/Secure_attention_key https://en.wikipedia.org/wiki/Secure_attention_key
- segfaultbuserr 5y agoEverything old is new again.
- rzzzt 5y agoThe section on the key combo for Linux and its linked documentation page in the footnote says the sequence is not C2 compliant. Is it because of the location of the keys involved, or rather what they do or don't do?
- yencabulator 5y agoC2 likely (it's been two decades, I can't remember!) requires more specific protections, than just "kill anything on the current tty". For example, C2 was pretty keen on only allowing a single admin connection at a time. We actually had to build a mechanism on top of SSH to guarantee that! It wouldn't surprise me if they required SAK to kick out remote users. "Bring this system fully into my control" kind of thinking.