Ubuntu QA:
BlogBrainstormPackage status
Log in
Ubuntu QA
The Ubuntu community has contributed 17459 ideas, 107690 comments, 2263278 votes
Idea sandbox Idea sandbox
Popular ideas Popular ideas
Ideas in development Ideas in development
Implemented ideas Implemented ideas
Idea #6415: Show failed login attempts

Written by Rioting_Pacifist the 5 Apr 08 at 02:47. Category: Security. Related project: Nothing/Others. Status: New
Rationale
When you login at a console level, you are informed about failed login attempts:
"There have been x failed login attempts since the last login
The last was ..."
a simple non intrusive popup should inform users when the next login (im picturing something like amarok song changes, that stays until a little x is clicked, but design isn't really important).

For bonus point do something similar when the screen is locked
Tags: (none)

57
votes
up equal down
Solution #1: Auto-generated solution of idea #6415
Written by Rioting_Pacifist the 5 Apr 08 at 02:47.
Ubuntu Brainstorm was updated in January 2009. Since the idea #6415 was submitted before this update, its rationale and solution are not separated. Please vote accordingly, and if you have the necessary rights, please separate the rationale from the solution. Thanks!
4
votes
up equal down
Solution #2: Use notification daemon
Written by band-b the 7 Jun 09 at 17:32.
Using the notification daemon could give this kind of feedback to the user.
+) It would be consistent with the rest of the notifications
+) non-intrusive
-) notifications dissappear


Propose your solution

Attachments
No attachments.


Duplicates


Comments
dan.fernandez wrote on the 5 Apr 08 at 12:32
+1

More than that, a "security issue" icon should appear on tray. When clicked, it should show something like that message.

Manos wrote on the 11 May 08 at 17:24
I agree, this would be a great feature.
Someone can try unlimited number of times to login and the average user would not know.
At the moment, you can see the failed attempts in /var/log/auth.log

+1

Manos wrote on the 11 May 08 at 17:34
I just realized, that this should be triggered after a number of failed logins, like 10 or 6.
If this would show for just 1 or 2 failed attempts, then whenever I accidentally type my password I would see this.
There is no need to inform the user of 1 or 2.

or

When I login successfully, it would show the failed attempts a minute or longer ago.
This would prevent it from showing any unsuccessful logins from that user(assuming he doesn't try his password every minute).

Rioting_Pacifist wrote on the 15 Jun 08 at 12:31
Manos its best to have a little popup saying you just got "your password wrong, idiot" than to try and second guess if it was the user or an 'attacker'


Post your comment