11 May
2010
11 May
'10
12:59 p.m.
Am 11.05.2010 14:56, schrieb Handsome Cheung:
yes, I run hal, but don't use display manager. Your answer inspired me, and I will check something about hal immediately. Thanks!
Even if the user is allowed to use hal to initiate a shutdown, it would still be necessary to exploit a security weakness in firefox that would allow an attacker to execute arbitrary commands. And a matching exploit would have to be on any website that triggers the shutdown ... this all sounds very unlikely.