Ubuntu QA:
BlogBrainstormPackage status
Log in
Ubuntu QA
The Ubuntu community has contributed 22823 ideas, 138726 comments, 2639112 votes
Idea sandbox Idea sandbox
Popular ideas Popular ideas
Ideas in development Ideas in development
Implemented ideas Implemented ideas

Contributor Draco6slayer on the Security category

Auto-login is insecure; alternative is slower  
Written by Draco6slayer the 11 Nov 12 at 17:14. Global category: Security. New
Wherever you look for tips on cutting startup time, regardless of your OS, you'll find that a great method is getting rid of your password or setting the system to log in automatically. Unfortunately, this is a two-edged sword- suddenly your computer is far less secure. This is an idea to dull the edge that cuts the security.
25
votes
up equal down
Solution #1: Auto Login & Lockout
Written by Draco6slayer the 11 Nov 12 at 17:14.
The user could enable a setup that allows the system to log on automatically on startup, but then denies access to the mouse and keyboard until the password is entered. That way, if you turn on your computer and walk away, you'll return and only have to enter a password to begin using the computer.
5
votes
up equal down
Solution #2: Encrypt private data
Written by Dreamsorcerer the 14 Nov 12 at 19:03.
Unless you use disk encryption, the login doesn't provide any security anyway.

I think it would be better to encrypt private parts of the system, and simply require a password from the keyring in order to access any of these parts.

I encrypt my Firefox data, so the keyring must be unlocked before anybody can open Firefox. This also means people can use another browser on my laptop without being able to access my stuff.

I documented the Firefox encryption method at:
http://blog.sambull.org/encrypt-firefox
3
votes
up equal down
Solution #3: Stay in lightdm, but preload the user settings i background.
Written by josthohad the 9 Dec 12 at 12:04.
Lightdm should still bee the login manager, but the loading process could be started automatically for the user "chosen/marked" in lightdm. this does requirer more work by the system, but before login there is no other other need for the muscles anyway. In cases of multiple user the user could all bee loaded, one by one. starting from the one "chosen/marked".

See the 5 comments or propose a solution (latest comment the 26 Nov 12 at 17:04) >>