Ubuntu QA:
BlogBrainstormPackage status
Log in
Ubuntu QA
The Ubuntu community has contributed 22700 ideas, 138270 comments, 2629576 votes
Idea sandbox Idea sandbox
Popular ideas Popular ideas
Ideas in development Ideas in development
Implemented ideas Implemented ideas

Contributor slashdotaccount

Enhancy Privacy/Security, Wipe RAM on shut down, reboot and trigger  
Written by slashdotaccount the 22 Aug 12 at 20:14. Global category: Security. New
It has been demonstrated [2] by researchers, that contents of RAM can be extracted for at least 5 minutes [3] even after the machine has already been powered off. Most users are not aware of this. The RAM can contain sensitive data, such as passwords, documents and encryption keys, etc.

Ubuntu should wipe (securely delete) contents of RAM when the system gets shut down, restarted or on request. Other distributions (Tails and Liberte Linux) do already do it.

That feature is even more important for people using Full Disk Encryption, where everything except /boot is encrypted. Cold Boot Attacks [1] can be used to retrieve encryption keys from RAM. Only wiping the RAM ensures, that all data on a fully encrypted disk is safe the moment the system got powered off. Otherwise there is a window for at least 5 minutes for the adversary the extract content.

Note:
Do not believe unstained claims, that DDR3 RAM would circumvent this attack. That has never been claimed or proven by any researchers and if you mail them, they won't tell you, that this is the case.

Prior work:
- Tails RAM Wipe introduction [6]
- Some more information about tails RAM Wipe implementation [8]
- Liberte Linux RAM Wipe introduction [5]
- More implementation details about Liberte Linux RAM Wipe implementation [7]
- memtest not deleting everything [4]
- Test if RAM Wipe is working [9]
- Tails mailing list discussion [10]
- Another Tails mailing list discussion [11]
- Kernel bug report [12]
- Debian bug report [13]
- Erase memory: the GRUB way [14]

[1]: https://en.wikipedia.org/wiki/Cold_boot_attack

[....]
29
votes
up equal down
Solution #1: use kexec and smem / memtest
Written by slashdotaccount the 22 Aug 12 at 20:14.
At the very end of the shut down or reboot process or if a command the command "wiperam" is launched, kexec into a fresh kernel, use smem or an memtest fork and wipe the RAM.

It has been done for other Linux distributions. See "Prior work" in rationale.

(Once that is implemented, people can trigger "wiperam" any way they like to. For example they can create a panic shortcut. Or they could trigger "wiperam" once an USB pendrive gets removed. That means they can connect the USB pendrive with their arm by a cable and once somone robs their notebook, it will automatically wipe the RAM and power off, thus the adversary will be unable to extract any contents from RAM. If he combines that will full disk encryption, he will be on very safe side.)

(The feature should be optional. Option to enable/disable.)
0
votes
up equal down
Solution #2: wipe every other byte of data
Written by theQxQ the 23 Oct 12 at 17:26.
I don't know how long it would take to wipe all of the ram, but if it's a lengthy process, you can wipe every other byte of ram. or add/remove random bytes in random areas. the data will be corrupt and a lot less readable.

I'm not saying replace the current solution with this one, but put this option in addition to the other one.

See the 5 comments or propose a solution (latest comment the 7 Sep 12 at 10:15) >>

Secure Network TIme Synchronization  
Written by slashdotaccount the 16 Aug 12 at 00:38. Global category: Security. New
Currently Ubuntu gets sets it's system clock over unauthenticated NTP. Thus, any man in the middle can modify answers from NTP servers and the client's or server's operating system has no way to recognize that, only hope the user will recognize and act accordingly.

Correct time is absolutely crucial for many security related things. Some systems do not have a hardware clock or hardware clock is defunct (battery low). If an adversary managers to set the time several years back, he can let the user accept already revoked, broken, expired certificates. Replay old, broken, outdated, known vulnerable updates etc.
37
votes
up equal down
Solution #1: use authenticated NTP
Written by slashdotaccount the 16 Aug 12 at 00:38.
NTP supports authentication. Use it. At least optionally. Add an GUI option to enable/disable it.

Ubuntu could host a few authenticated NTP servers, announce this and ask other NTP server admins to add authentication.

See the 5 comments or propose a solution (latest comment the 6 Sep 12 at 23:09) >>

keep it simple  
Written by slashdotaccount the 14 May 08 at 21:53. Global category: Others. Not an idea
dont keep adding and adding programs and features.. thats were microsoft went wrong with vista keep it simple so people will want to use it more
-25
votes
closed
Solution #1: Auto-generated solution of idea #8572
Written by slashdotaccount the 14 May 08 at 21:53.
Ubuntu Brainstorm was updated in January 2009. Since the idea #8572 was submitted before this update, its rationale and solution are not separated. Please vote accordingly, and if you have the necessary rights, please separate the rationale from the solution. Thanks!

See the 7 comments or propose a solution (latest comment the 30 Nov 11 at 23:53) >>

Allow custom user tagging for applications  
Written by slashdotaccount the 19 Oct 11 at 14:24. Related project: Unity. Not an idea
When you open unity and start typing a word, sometimes the word you type doesn't show the application you want. Please allow the user to add custom tags to applications
0
votes
closed
Solution #1: Right-click in the software center
Written by slashdotaccount the 19 Oct 11 at 14:24.
Right-click in the software center and have an option to add custom tag dialog.

See the 1 comments or propose a solution (latest comment the 20 Oct 11 at 00:32) >>

Increase language support for installed packages  
Written by slashdotaccount the 3 Nov 09 at 16:26. Related project: Synaptic package manager. New
Before installing Ubuntu, you are asked, in which language you want to install it and the base system is installed in that language. However, there are some porgramms that are still in English (for example OOo I think).

In addition to that, if you install some packages they are in English although there is a language package in the sources (Enigmail for Thunderbird for example).

You have to go to the system menu and then to language to install all the missing language packages. Ubuntu knows which packages you might be interested in so why doesn't it give me that list earlier?
-8
votes
up equal down
Solution #1: Install the language packages by default
Written by slashdotaccount the 3 Nov 09 at 16:26.
If I want to install Enigmail and my system is german, please install german enigmail localisation whithout bothering the user with a dialogue.
9
votes
up equal down
Solution #2: Ask if a translation should be installed
Written by slashdotaccount the 3 Nov 09 at 16:27.
If I want to install Enigmail and my system is german, please ask whether I want to install the german translation or not.

See the 1 comments or propose a solution (latest comment the 19 May 11 at 19:48) >>

Hello There  
Written by slashdotaccount the 1 Apr 11 at 17:31. Related project: AbiWord Word Processor. Not an idea
DAmn ya all
0
votes
closed
Solution #1: cannot be fixe
Written by slashdotaccount the 1 Apr 11 at 17:31.
asda

Add a comment or propose a solution >>

Application switcher that responds to infrared remote control  
Written by slashdotaccount the 3 Oct 10 at 08:39. Global category: Usability. Already implemented
My idea here is to have an application switcher that would display certain selected software programs in large(ish) items on the desktop, and let a remote control user use the aroow keys and OK button to move between applications and select one. Alternately, make the desktop remote aware so that the remote can be used to select a program to run from the desktop.
0
votes
closed
Solution #1: Make the desktop remote-aware
Written by slashdotaccount the 3 Oct 10 at 08:39.
Allow programming a remote so that when the desktop is the foreground application, the arrow keys and OK button on the remote can be used to move between applications and to select the desired application. It would also be desirable if (and only if) the user is in a NON-remote aware application that a button on the remote could be used to close the topmost application, and another button used to bring the desktop to the foreground.

See the 1 comments or propose a solution (latest comment the 12 Oct 10 at 23:47) >>

Disallow Users from Downloading Packages from Old Repositories  
Written by slashdotaccount the 18 Sep 10 at 00:14. Related project: Synaptic package manager. Not an idea
Users can add old repositories and turn off their new repositories and then download old packages. The old packages can replace the newer ones causing dependency issues.
0
votes
closed
Solution #1: Warning Box when Users Try to Download Old Packages
Written by slashdotaccount the 18 Sep 10 at 00:14.
There should be a warning box when users try to replace new packages with older packages saying something like "Replacing package %package name of newer version% with %package name of older version% may cause dependency issues".

See the 1 comments or propose a solution (latest comment the 24 Sep 10 at 23:45) >>

Dependency system is obsolete  
Written by slashdotaccount the 14 Jun 10 at 13:39. Related project: Synaptic package manager. New
The system of packages and dependencies causes a lot of trouble and brings a lot of compatibility issues (example: older programs that link to old system libraries that are no longer compatible with the newer ones and cannot be installed because they are incompatible and break the rest of the system). It had sense to use it in the past when disk space and memory usage was scarce, but nowadays security risks trumps most of the usefulness of sharing libraries and disk space is both cheap, and huge. In fact, orphan and dependency packages are now more of a problem than a solution, and it constantly waste disk space.
Installing programs nowadays is a headache because instead of downloading all the files you need, you need to create a puzzle by downloading all required parts from different repositories and hope you gather all of them and are compatible with what you have installed.
Uninstalling programs is also troublesome, because bad dependency checks means that removing one package (ex, gnome games) might create a chain of uninstalls (visual impairment aid, gnome desktop, etc).

-34
votes
up equal down
Solution #1: Reengineering of package and dependency system
Written by slashdotaccount the 14 Jun 10 at 13:39.
PROPOSED SOLUTION:
1. One program, one folder. All required libraries on one package. All dependent libraries of that program included in subfolders.
2. One exception: One system folder for "Shared Libraries". When installing a library, give an option to include it in that folder. System libraries like libc go to that folder. The package manager looks if a compatible library is in "shared library" folder to see if it can skip redundant copies.

PROS: Easy installation & uninstallation, removes dependency problems, removes compatibility problems, less orphan files, easy to implement, repositories easier to manage, installers much easier to develop, more compatibility with packages from other distros, fewer questions asked in forums, updates don't break unrelated software, closing the gates of hell.

CONS: Takes a bit more space in disk, might require a bit more memory if shared libraries aren't in shared library folder. Programs work on the non-shared libraries they were designed for, and not the updated ones (unless the developer updates the package himself). Developers must have faith in that there's something better than linux's dependency system of the 60-70s.
13
votes
up equal down
Solution #2: Request Version
Written by drdanielfc the 30 Jun 10 at 13:50.
A program should be able to say "i want lib-watever v2.3." If the program fails to execute properly using the latest version of the library, then ubuntu should ask you to install the library version the program requested from the start

See the 10 comments or propose a solution (latest comment the 13 Sep 10 at 15:33) >>

A mounted Divice shold be more eye-catching on the Desktop.  
Written by slashdotaccount the 22 May 10 at 21:00. Related project: Gnome. New
A mounted Divice looks like everything else. Because of that you have to search for it (On my desktop ;))
24
votes
up equal down
Solution #1: There should be a special area for it.
Written by slashdotaccount the 22 May 10 at 21:00.
On the right should be a frameless area where only the Devices are. If there are too many devices it should be scroll-able.
4
votes
up equal down
Solution #2: Make something like KDE's plasmoid for mounted devices.
Written by neonesis the 16 Jun 10 at 20:31.
There should be a small program or applet on one of the bars(or somewhere else) where you can see all mounted devices and actions available for them. Just like in KDE. On when you mount your iPod, the applet enlarges (with transparency, so you still see entire screen) and bolds freshly mounted device. After a few seconds it goes back to normal icon state.

See the 3 comments or propose a solution (latest comment the 16 Jun 10 at 17:04) >>

2 Next >>