http://bugzilla.opensuse.org/show_bug.cgi?id=941038 Bug ID: 941038 Summary: screensaver shouldn't unlock without button Classification: openSUSE Product: openSUSE Distribution Version: 13.2 Hardware: Other OS: openSUSE 13.2 Status: NEW Severity: Critical Priority: P5 - None Component: Security Assignee: security-team@suse.de Reporter: Nick_Levinson@yahoo.com QA Contact: qa-bugs@suse.de Found By: --- Blocker: --- When the XLyap screensaver in IceWM on AMD hardware was running and I entered the password to unlock it, I did not press either button, but it unlocked anyway, raising a security concern (users rely on locked screensavers to be locked). I assume the countdown timer would lock me out in case I thought the password was longer because I didn't really know it (that was a test). It would be more secure for the user to signify when the password is complete. -- You are receiving this mail because: You are on the CC list for the bug.