[16588] in Athena Bugs
sun4 8.2.15: xlogin
daemon@ATHENA.MIT.EDU (Matt Braun)
Tue Jan 5 00:08:21 1999
To: bugs@MIT.EDU
Cc: tytso@MIT.EDU
Date: Tue, 05 Jan 1999 00:08:18 EST
From: Matt Braun <mhbraun@MIT.EDU>
System name: forever.mit.edu
Type and version: Ultra-5_10 8.2.15 (plus partial mkserv)
Display type: m
What were you trying to do?
Absolutely nothing.
What's wrong:
Since the console of my workstation is not often used, my officemates
will often move my keyboard out of the way or pile things near my
computer. At 10:30 PM some stuff got piled on forever's keyboard,
likely the return key, and since my username was the default xlogin
username, the pile of stuff kept trying to log in as mhbraun.
The result was from 10:30 to 11:40 or so when it was discovered,
forever requested 4 TGT's / second for mhbraun.
What should have happened:
Random objects (animate or not) should not be able to try to log in so
frequently. I suggest some sort of limitter on xlogin that prevents
it. It could be as simple as a dialog box that pops up after
something like 20 unsucessful login attempts within 1-2 minutes that
a user has to move the mouse to to click away, since most
inanimate objects do not have that much dexterity.
Please describe any relevant documentation references:
Nothing I can think of
