Bug 318173

Summary: Screensaver makes user feel the screen is lock while it's not
Product: [Unmaintained] kscreensaver Reporter: Raymond Wooninck <tittiatcoke>
Component: locker-qmlAssignee: Plasma Bugs List <plasma-bugs-null>
Status: RESOLVED DUPLICATE    
Severity: major CC: iankko, me, oliver.henshaw
Priority: NOR    
Version First Reported In: 4.10.2   
Target Milestone: ---   
Platform: Other   
OS: Linux   
Latest Commit: Version Fixed/Implemented In:
Sentry Crash Report:

Description Raymond Wooninck 2013-04-11 07:26:22 UTC 
After timeout the KDE screensaver kicks in showing login dialog, exactly the
same as when the screen is locked (user name, password, etc). Despite that the
screen is not locked at all, pressing any key gets rid of the saver screen.

This could be a security threat, tricking users to think they are safe while
that's not the case.

This is a security-issue bug that was raised by the security team within openSUSE.  I agree with this statement as that with the current layout of the simple screenlocker one get indeed the feeling that the screen is locked as that the password dialog box is on the screen.  The password dialog and the statement that the screen is locked, should only appear if the screen is actually locked !!

Reproducible: Always
Comment 1 Haro de Grauw 2013-04-12 10:13:47 UTC 
See also bug 316316.

openSUSE ref.:
https://bugzilla.novell.com/show_bug.cgi?id=802959
Comment 2 Oliver Henshaw 2013-05-06 17:57:15 UTC 

*** This bug has been marked as a duplicate of bug 315442 ***