Rich Freeman on 15 Apr 2012 19:21:51 -0700


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: [PLUG] Anyone used join.me on Linux?...


On Sun, Apr 15, 2012 at 8:10 PM, Fred Stluka <fred@bristle.com> wrote:
> It's very powerful, but small footprint, screen-sharing software from
> the makers of LogMeIn.  Runs in any browser via Flash.
>
> I've used it on Mac and Windows w/no problem, but I see conflicting
> reports of whether it works on Linux.  Today I talked to a guy who
> could not get it to work on his Linux desktop, trying two different
> browsers.
>
> Have you used it?  Does it work?
>

Gosh, I hope not.  Browser plugin that runs automatically can give
arbitrary websites access to view the entire contents of your screen?
Somebody has to come up with a better sandbox for plugins.  Then
again, the browser is running on X11, where any client can read the
input to any other client unless it has the display locked (which
almost nobody bothers to do these days).

The real security problem of the future isn't applications running
with administrative access - it is the fact that even running them
with user access doesn't really buy you much.  Would love to see
better sandboxing at the process level.  Firefox doesn't need to be
able to read my xterm input, or attach to my ssh-agent process and
inspect its memory.  However, I'm pretty sure it could if it (or the
injected code it might be running) wanted to.

Rich
___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug