Ubuntu QA:
BlogBrainstormPackage status
Log in
Ubuntu QA
The Ubuntu community has contributed 22823 ideas, 138726 comments, 2639112 votes
Idea sandbox Idea sandbox
Popular ideas Popular ideas
Ideas in development Ideas in development
Implemented ideas Implemented ideas

Popular ideas Here are random ideas about Ubuntu.

support for IEEE 1667 standard  
Written by underdog512 the 27 Jan 09 at 14:30. Global category: Security. New
This is a standard for securing Transient Storage Device (TSD), such as a USB flash drive. I believe that Ubuntu go ahead and throw support behind this one so that when it becomes official/popular Ubuntu will be ahead of the game.

http://ieeexplore.ieee.org/xpl/freeabs_all.jsp?tp=&isnumber=4233254&arnumber=42 33255&punumber=4233253



42
votes
up equal down
Solution #1: IEEE 1667
Written by underdog512 the 27 Jan 09 at 14:30.
Build support for the protocol directly into the next version of Ubuntu. Maybe integrate some tool into nautilis that uses this protocol.

See the 5 comments or propose a solution >>

Sudo matters  
Written by Lachu the 10 Jun 09 at 12:51. Global category: Security. New
Sudo is very annoying think to give specific command extra rights. Firstly users may use a command line. Secondly it's not information about what these thinks doing in our system. Additionally sudo will remember admin password, what is dangerous.
4
votes
up equal down
Solution #1: Look at SecShell
Written by Lachu the 10 Jun 09 at 12:51.
I must admit it's my project, so I have many subjections about it. It try matching rules about files, commands, binaries described in special file to each activity. Each rules contains comment for end users and dangerous level. To any lines of script(or not script - it cannot contains forks or using env variables) we applied rule with highest dangerous level. Command don't matching to anything(command or binaries) have highest dangerous level. Before this precess we should preprocess file delivered to user. It's kinda funny. Allbody thinks scripting language don't needs preprocessing, but I would said in security manner yes. Preprocessor solving conditions, any blocks, loops, etc. In fact, it will gives us list of command to do. User may only read information on single dialog, looks at security information(icon, comments, files which will be touched, commands, etc. ) and answer yes or not. We don't need to remember password.

Please look at: http://slawek.lach.art.pl/secure-shell.tar.gz
It's only concept, but it also working, so you will test it. I think you should wrote some think similar.

Thanks!
1
votes
up equal down
Solution #2: An update to the DEB packaging system
Written by bobmogal the 10 Dec 10 at 21:37.
An update to DEB would solve this, it would have to be optional to start with, say for 11.10, but then it should be required from 12.04 onwards.
0
votes
up equal down
Solution #3: Sandbox for files runned by user.
Written by Lachu the 11 Dec 10 at 19:43.
Change nautilus/dolphin/plasma to run all programs ran by user in very minimal sandbox.

Also, let developers inform the system, which privileges application needs(by writing information is special section of executable file).

System can also reads import table to decide, what application like to do.

This information could been displayed for user and user will only click "allow" to exit sandbox or build new sandbox for this executable.

User will only click on file and select give requested rights, looks on displayed information and click accept.

Similar solution is using by Microsoft for exe file format.

Application, that supports this feature will inform user, that he must give privileges and rerun program. User will only right click on file and do described tasks.

See the 4 comments or propose a solution >>

Work with Fedora on Consolidating Crypto on NSS  
Written by schmichael the 20 Oct 08 at 19:42. Global category: Security. New
Fedora has an excellent initiative to consolidate core applications on Mozilla's NSS[1] crypto library.[2]

This would significantly ease security management for system administrators and hopefully improve SSO systems for end users.

It would be great to see the distros work together to make this happen as its really not something we can expect to be solved upstream.

[1] http://developer.mozilla.org/en/NSS
[2] http://fedoraproject.org/wiki/FedoraCryptoConsolidation
25
votes
up equal down
Solution #1: Auto-generated solution of idea #14632
Written by schmichael the 20 Oct 08 at 19:42.
Ubuntu Brainstorm was updated in January 2009. Since the idea #14632 was submitted before this update, its rationale and solution are not separated. Please vote accordingly, and if you have the necessary rights, please separate the rationale from the solution. Thanks!

See the 2 comments or propose a solution >>

Allow encryption of any folder in the system (Easier encryption system)  
Written by diegoj the 28 Nov 08 at 01:25. Related project: Nautilus. New
The ~/Private method of storing encrypted data is a bit darkened. If you don't know that Ubuntu has got this feature and that you have to install it, you don't realize that can do that.

My proposition: Allow encryption of any folder in ~/ clicking with left button in Nautilus. If user doesn't have the packages, he would be asked for his/her permission to install them.
131
votes
up equal down
Solution #1: Auto-generated solution of idea #16023
Written by diegoj the 28 Nov 08 at 01:25.
Ubuntu Brainstorm was updated in January 2009. Since the idea #16023 was submitted before this update, its rationale and solution are not separated. Please vote accordingly, and if you have the necessary rights, please separate the rationale from the solution. Thanks!
6
votes
up equal down
Solution #2: Intuitive encryption
Written by yman the 6 Feb 09 at 02:41.
(the term "file" here refers both to files and directories:)
When encrypting a directory, the directory and it's contents will be recursively encrypted. When a file is encrypted it's contents will be replaced with the encrypted version, which means links will still work, and the encryption will look more natural and intuitive to the user. When a file is decrypted, the decrypted content will be stored in a cache that's accessible only to the file's owner. When the owner of an encrypted file isn't logged in all files in the cache will be deleted. If a file was changed, the new version will be encrypted and replace the old content before being deleted.

The cache should sit in permanent storage (like a hard drive) so the data won't be lost in case of a black-out and other similar events.

See the 4 comments or propose a solution >>

Enhancing privacy in IRC  
Written by amay82 the 22 May 10 at 12:11. Related project: XChat-GNOME IRC Chat. New
For many users, it is relevant to encrypt as much data as possible so that their ISP or maybe people who share the same (W)LAN can't grab their traffic. For instance, a programmer in a company could go online into FreeNode #rubyonrails to ask a question related to this project, but (s)he doesn't want his/her boss to know what exactly he/she had asked (for instance, because the boss could think "(s)he should already know this", etc.)

Also, the fact that IRC servers often provide SSL, shows that I'm not the only one who thinks it can be useful. If it was completely useless, nobody would provide it.

I can't think of any disadvantages.
29
votes
up equal down
Solution #1: Activate SSL by default
Written by amay82 the 22 May 10 at 12:11.
For all networks in xchat-gnome, activate SSL by default if the network supports it.

For instance, I know two networks:
* FreeNode - on port 7000
* Ubuntu servers - on port 7000, too

See the 4 comments or propose a solution >>

empathy ignore list.  
Written by ppp0 the 2 Jun 10 at 08:48. Related project: Gnome. New
It will be great some kind of ignore list implemented.
Ignore list by icq uin (or any im network ID) or by keywords which can be in the message, or something else.
Some system wich could recognize spam.
And i can't find empathy in "related project".
0
votes
up equal down
Solution #1: hm...
Written by ppp0 the 2 Jun 10 at 08:48.
no idea right now...

Add a comment or propose a solution >>

Email GPS coordinates of stolen computer with GDM  
Written by Auzy the 19 Sep 08 at 09:00. Global category: Security. New
Many phones these days have GPS built in, and as the cost of chips drop, it becomes even more likely that gps will be built into peoples laptops (or offered as a custom option).

I propose that in the case an incorrect password is typed in, the GPS coordinates are emailed out to a designated email address. This would be done discreetly, as not to arouse suspicion, and would allow accurate enough information for the laptop to be recovered (especially if the laptop has a 3G wireless card built in).

This idea is an enhancement of Take webcam pictures of failed logins. Brands which have GPS chips built in would also quickly become well known as not being "robber-friendly".
73
votes
up equal down
Solution #1: Auto-generated solution of idea #13409
Written by Auzy the 19 Sep 08 at 09:00.
Ubuntu Brainstorm was updated in January 2009. Since the idea #13409 was submitted before this update, its rationale and solution are not separated. Please vote accordingly, and if you have the necessary rights, please separate the rationale from the solution. Thanks!

See the 7 comments or propose a solution >>

Implement DNSSEC - avoid nasty DNS-hackers  
Written by nandersson the 12 Jan 09 at 12:00. Global category: Security. New
DNSSEC is going to be the next "big thing" in DNS. Fedora is implementing it, Microsofts implements it in Windows 7 and Windows Server 2008 R2.

Ubuntu must have good support.

See http://fedoraproject.org/wiki/Features/DNSSEC for affected packages etc.
239
votes
up equal down
Solution #1: Add DNSSEC blueprint in Launchpad
Written by nandersson the 12 Jan 09 at 12:00.
Create a DNSSEC blueprint in Launchpad. Set priority accordingly and track progress from there. Could probably be targeted for Ubuntu 9.10.

See the 1 comments or propose a solution >>

Antivirus  
Written by rodnyketi the 9 Jan 09 at 23:25. Global category: Security. New
Hello I am using ubuntu since the las 8 months and I am very happy with this OS is the best for me, but I was checking about the virus and malwares, I know that ubuntu has not that problem and I know that there is Guardog and Clam to but mu suggestion is, why not and AV that is just execute when ever is needed like just to open to do an scan and and do the cleaning if needed.
-34
votes
up equal down
Solution #1: Auto-generated solution of idea #17163
Written by rodnyketi the 9 Jan 09 at 23:25.
Ubuntu Brainstorm was updated in January 2009. Since the idea #17163 was submitted before this update, its rationale and solution are not separated. Please vote accordingly, and if you have the necessary rights, please separate the rationale from the solution. Thanks!

See the 2 comments or propose a solution >>

"passwords and encryption keys" shows passwords too easily to prying eyes  
Written by openaccent the 20 Oct 10 at 09:21. Global category: Security. New
If anyone leaves their ubuntu logged in unattended it's as easy as navigating through the menus to "passwords and encryption keys" and ticking the "show password" to reveal and steal anyone's passwords.
9
votes
up equal down
Solution #1: Master password
Written by openaccent the 20 Oct 10 at 09:21.
There would be an option to create a master password to access the "passwords and encryption keys" or atleast a password on the function of the "show passwords" box.
2
votes
up equal down
Solution #2: ask for session user password
Written by ubuntuuser the 24 Nov 10 at 01:55.
My suggestion would be: if you tick show password box, the session login password of the user should be asked . If the password is wrong, then the credentials will not be shown.

See the 4 comments or propose a solution >>

<< Previous 1 2 3 4 5 6 7 8 9 ... Next >>