Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (Cyborg)
  • No Skin
Collapse
Brand Logo

CIRCLE WITH A DOT

  1. Home
  2. Uncategorized
  3. Is there no way to show a script-generated welcome message on gdm/GNOME?

Is there no way to show a script-generated welcome message on gdm/GNOME?

Scheduled Pinned Locked Moved Uncategorized
gnomegdmgdm3infosecsecurity
4 Posts 2 Posters 1 Views
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • spacebug@n3.mikronod.seS This user is from outside of this forum
    spacebug@n3.mikronod.seS This user is from outside of this forum
    spacebug@n3.mikronod.se
    wrote last edited by
    #1

    Is there no way to show a script-generated welcome message on gdm/GNOME? πŸ€”

    I had an security idea where the welcome message would be a sha512 hash, created with todays date + time (15 minutes interval) + pre randomly created static salt.

    When you are about to login you check the hash against a hash you created on your phone.
    If it's the same hash, you know it's your computer and not a honeypot someone put there to get your password. πŸ”‘

    #GNOME #GDM #GDM3 #Infosec #Security #Linux

    spacebug@n3.mikronod.seS fabiscafe@mstdn.socialF 2 Replies Last reply
    1
    0
    • R relay@relay.infosec.exchange shared this topic
    • spacebug@n3.mikronod.seS spacebug@n3.mikronod.se

      Is there no way to show a script-generated welcome message on gdm/GNOME? πŸ€”

      I had an security idea where the welcome message would be a sha512 hash, created with todays date + time (15 minutes interval) + pre randomly created static salt.

      When you are about to login you check the hash against a hash you created on your phone.
      If it's the same hash, you know it's your computer and not a honeypot someone put there to get your password. πŸ”‘

      #GNOME #GDM #GDM3 #Infosec #Security #Linux

      spacebug@n3.mikronod.seS This user is from outside of this forum
      spacebug@n3.mikronod.seS This user is from outside of this forum
      spacebug@n3.mikronod.se
      wrote last edited by
      #2

      The creation of the hash should probably also include for example an "x", indicating that no USB-event has happend (no one has plugged in or out any USB-device).

      1 Reply Last reply
      1
      0
      • spacebug@n3.mikronod.seS spacebug@n3.mikronod.se

        Is there no way to show a script-generated welcome message on gdm/GNOME? πŸ€”

        I had an security idea where the welcome message would be a sha512 hash, created with todays date + time (15 minutes interval) + pre randomly created static salt.

        When you are about to login you check the hash against a hash you created on your phone.
        If it's the same hash, you know it's your computer and not a honeypot someone put there to get your password. πŸ”‘

        #GNOME #GDM #GDM3 #Infosec #Security #Linux

        fabiscafe@mstdn.socialF This user is from outside of this forum
        fabiscafe@mstdn.socialF This user is from outside of this forum
        fabiscafe@mstdn.social
        wrote last edited by
        #3

        @spacebug why not just use a fido device to login?

        spacebug@n3.mikronod.seS 1 Reply Last reply
        0
        • fabiscafe@mstdn.socialF fabiscafe@mstdn.social

          @spacebug why not just use a fido device to login?

          spacebug@n3.mikronod.seS This user is from outside of this forum
          spacebug@n3.mikronod.seS This user is from outside of this forum
          spacebug@n3.mikronod.se
          wrote last edited by
          #4

          @fabiscafe
          How do they work?
          They don't leak any data if you plug them in a honeypot device and use them?

          1 Reply Last reply
          1
          0
          Reply
          • Reply as topic
          Log in to reply
          • Oldest to Newest
          • Newest to Oldest
          • Most Votes


          • Login

          • Login or register to search.
          • First post
            Last post
          0
          • Categories
          • Recent
          • Tags
          • Popular
          • World
          • Users
          • Groups