Fake login screens

[Thomas Jaeger]

Vincenzo Ciancia wrote:
> However, it seems to me that nobody is getting the point about fake 
> login screens: if I am an *user* of somebody else's network, how can I 
> protect myself from another *user* faking a login screen, used as the 
> only running X application, and stealing my password?

C-A-B offers no protection against this attack, as users can easily
remap keys.  If you don't believe me, run

xmodmap -e 'keycode 22 = '

and then try killing the X server using C-A-B.