Bug Report [security issue] Replay buffer bypasses Windows password

[layarion]

So if I have the replay buffer going, forget that it's on, and put my computer in sleep mode and walk out the door.

Someone else can just walk up to my computer and get right on my desktop because the system will look like it's going to sleep, but soon afterword the system will come back to the desktop because OBS has it's popup asking if i'm sure I want to interrupt this.

If I forget about any of these issues, and think my computer is asleep and therefore password protected from the login screen, i'll be in for a rude awakening when I come back and see someone nosing through my files.

 

[Tarumes]

I'm not aware of the problem.
When I send my computer to sleep mode.
he always asks me for a password.
seems like you changed something?

 

[Tarumes]

Win 10 Home cant confirm your issue
Win 10 Pro cant confirm your issue
Win 7 Home cant confirm your issue
Win 7 Ultimate cant confirm your issue

all tested OS are default installations
all ask me for password

 

[R1CH]

OBS does try to prevent sleep with active outputs, but this won't bypass the password provided you have the option to prompt for password on wake-up.

 

[layarion]

just double checked, and yes it was set to that when this happened since I haven't touched any of my password settings between now and then:

 

[layarion]

hey i have a video showing the bug, but it has some personal information on it (my name, and some phone numbers) and i'd like to submit the video privately. how-to?

 

[R1CH]

You could link it in a private bug report on Mantis (https://obsproject.com/mantis/), are you sure your desktop is going to sleep though? As mentioned, OBS inhibits sleep if there is an active output, so Windows itself may not actually be going to sleep.

 

[Tarumes]

with some PCs you have the option to enable DeepSleep in BIOS set this to "enable" this will help even with active output
my pc goes into deepsleep and asks for password on wake (also for Wake on Lan)

 

[layarion]

it's more about, to anyone who isn't aware of what's happening, it LOOKS like your system is going to sleep.

as soon as you hit sleep, stuff happens like the monitor immediately going black. it doesn't actually go to sleep, but that's not the problem, the problem is someone who isn't aware might just walk away from their computer with it unlocked. That's the point.

 

[R1CH]

If it's not going to sleep then there is no issue, this is working as intended as OBS prevents sleep with an active output. You may try contacting Microsoft to report that the monitors turn off even though an app is actively inhibiting sleep, but it's unlikely this will be fixed.