#5393: Duplicate screenshots acquired in case Keymap preflet is opened. ----------------------------------+---------------------------- Reporter: damoklas | Owner: axeld Type: bug | Status: new Priority: normal | Milestone: R1 Component: Kits/Interface Kit | Version: R1/Development Resolution: | Keywords: Blocked By: | Blocking: Has a Patch: 0 | Platform: All ----------------------------------+---------------------------- Comment (by pulkomandy): There is a problem here : * Create a window with a view inside, the view has SetEventMask(B_KEYBOARD_EVENT); * Add a PrintToStream in the window MessageReceived or DispatchMessage * Unfocus the window * Notice it still gets ALL keyboard events Of course, the window will intercept some of them : screenshot, deskbar switcher, command Q. These were meant to be handled once by the focus view, now they are handled twice (by the focus window and the seteventmask one). More interesting : it's super-easy to make a keylogger and grab passwords and other useful info, as all of this gets (at least) in BWindow::DispatchMessage even when the window is not focused. I'm not sure the window should get these messages at all when it's not focused ? The Be Book doesn't seem to tell about it. Anyway, that's a rather critical security problem :/ -- Ticket URL: <http://dev.haiku-os.org/ticket/5393#comment:4> Haiku <http://dev.haiku-os.org> Haiku - the operating system.