Ubuntu QA:
BlogBrainstormPackage status
Log in
Ubuntu QA
The Ubuntu community has contributed 22700 ideas, 138270 comments, 2629576 votes
Idea sandbox Idea sandbox
Popular ideas Popular ideas
Ideas in development Ideas in development
Implemented ideas Implemented ideas

Contributor kees

A post-install full disk encryption migration manager  
Written by FiberOptix the 16 Mar 09 at 23:50. Global category: Security. New
The current advice for users wanting to implement full disk encryption post-install is:

1) Backup almost everything
2) Use the alternate installer
3) Update base system and kernel
4) Copy select files (like /boot, /etc/crypttab, etc.),
5) Overwrite new files with the old ones
6) Restore the select files from (4)
7) update-initramfs

This process is a pain and potentially catastrophic in several places. An automated tool to perform this task properly would be very helpful for many users who installed from the livecd and decide they want to use full disk encryption later on.
-4
votes
up equal down
Solution #1: Restore + Alternate Framework
Written by FiberOptix the 16 Mar 09 at 23:50.
I'm not a developer but I imagine that a solution might be implemented by creating a framework that manages backup and restoration along with the alternate install process.

Edit: I'm not surprised this hand-wavy solution is at -3, but then it should be easy to post a better one! I want to hear yours!

Add a comment or propose a solution >>

New users often choose insecure passwords.  
Written by ml2 the 24 Jan 09 at 15:58. Related project: Live CD installer. New
Currently, there is no way of knowing how secure a password is. This often leads to users making insecure passwords, which is a risk to security.
432
votes
up equal down
Solution #1: Implementing a password-strenght progress-bar
Written by ml2 the 24 Jan 09 at 15:58.
Implement a progress-bar which shows the password strength in the installer and user management tool.

Low strength = red;
middle strength = orange;
hight strength = green.

Thanks to Peter Koopman, who originally came up with the idea.
85
votes
up equal down
Solution #2: Implement Solution #1 but add to it
Written by gargouille the 30 Jan 09 at 02:55.
Solution #1 is an excellent idea. I think this could be expanded to have options for a password policy. These options could be available in System > Administration > Users and Groups. Check box options: (require uppercase & lowercase letters, require combination of numeric and alpha). A drop down box could also be added for the required minimum password size.

See the 9 comments or propose a solution (latest comment the 24 Aug 09 at 12:42) >>

Password and Login on the go  
Written by JohnM_83 the 22 Mar 09 at 12:00. Global category: Security. New
Many users which includes me, use Ubuntu on their laptops. Most of notebooks are not equipped with fingerprint readers or other biometric login systems so the most common method of login is to type in login and password which could be problematic in public where everyone can see what we type on keyboard thus I propose a method for "advanced" password typing.
5
votes
up equal down
Solution #1: Extended password with fixed place notation
Written by JohnM_83 the 22 Mar 09 at 12:00.
Here is my idea. I know it is quite bizarre but it may work fine.
User could enable "advanced password input", it is not set as a default after installation.
One using it could select which characters in a "full" password should be the "real" password. For example:
x|x|x|m|y|x|p|a|s|s
where the real password is my pass and x-es could be any character, randomly inputed every time. It does not mean any random generation of a first password but user could input adsmydpass or ds3my0pass and still could log in, there fore the "decoy" characters would have no meaning for the real password but could put offtrack someone who tries to memorize what we just typed.
To make it secure, it would be not possible to enter 2 times in a row the same sequence of characters - it would result in an information that a wrong password was entered and generate a feedback for user who would see it after popper login.
Position of the real password characters could be chosen by user, also the number of the same pass entry which would result in lockout.
This method partially randomizes the password and makes it harder to copy. It could only apply for login screen, everywhere else surplus characters wouldn't be mandatory.
It is quite complex but I know that there are ideas to implement face recognition to Ubuntu unfortunately I also know many issues with such methods. Lenovo and Toshiba failed in preparing a safe method of such authentication and authorization so in the mean time maybe something a bit easier to implement :).

See the 3 comments or propose a solution (latest comment the 14 Apr 09 at 10:02) >>

A "multimedia" privilege/group  
Written by diwic the 19 Mar 09 at 22:43. Global category: Security. New
Linux security is important, but often puts unnecessary restrictions for desktop/multimedia use. So I propose that a user can be granted/revoked a "multimedia" privilege.

Basically a user with this privilege has the ability to use the computer's resources (in particular, the CPU) in a non-cooperative fashion. This is needed in order to have low-latency audio, burn a DVD without underruns, watch a video without glitches etc.

Furthermore if this privilege was added, possibly some other groups and/or privileges could be skipped and instead included in this privilege (e g pulse-rt), making the system easier to configure without losing much power.
25
votes
up equal down
Solution #1: Add a new "multimedia" checkbox under "user privileges"
Written by diwic the 19 Mar 09 at 22:43.
Under System -> Administration -> Users and groups -> user properties -> tab "user privileges", there could be a new row for this "multimedia" privilege. That would make it easy to configure.

See the 1 comments or propose a solution (latest comment the 1 Apr 09 at 03:51) >>

No basic file encryption  
Written by firexq the 5 Mar 09 at 07:05. Global category: Security. New
The default encryption scheme in Ubuntu requires that I make a key and store it on a keyring to use... this is all well and good. However, there are times when a user will want to encrypt a file without the key being stored anywhere but his head. With the current system you need to have the decryption key saved, and even if you delete it afterwards, it's still theoretically recoverable.
22
votes
up equal down
Solution #1: Allow basic file encryption
Written by firexq the 5 Mar 09 at 07:05.
When I right-click a file and select "encrypt", I should have the option to simply enter a key and generate; this way, the key never leaves active memory, and the tinfoil hat can stay firmly on my head.
18
votes
up equal down
Solution #2: Add nautilus scripts for encryption
Written by tenplus1 the 5 Mar 09 at 21:23.
Nautilus can handle right-click scripts that allow the user to encrypt/decrypt a file by entering a password, this is available on www.gnome-look.org

See the 2 comments or propose a solution (latest comment the 7 Mar 09 at 19:53) >>