While my xscreensaver was up asking for the password (my desktop was "locked"); I noticed a notification popup from steam indicating a friend had just started playing a game.
Expected results:
Those popups should not appear or if they do "paint" behind the screensaver.
Current results:
Notifications are painting on top of the screensaver showing notifications bypassing the "unlock" feature of xscreensaver.
You can reproduce this by locking your screen; and having someone else join a game that's on your friends list.
I consider this a security issue as steam has essentially bypassed a core component of desktop security.
While my xscreensaver was up asking for the password (my desktop was "locked"); I noticed a notification popup from steam indicating a friend had just started playing a game.
Expected results:
Current results:
You can reproduce this by locking your screen; and having someone else join a game that's on your friends list.
I consider this a security issue as steam has essentially bypassed a core component of desktop security.