Comment 13 for bug 277894

Revision history for this message
Jessie Lawrence (nightwolf177-deactivatedaccount) wrote : Re: [Bug 277894] Re: anyone with a livecd can acces data on ubuntu -- encrypt home directories

if you explain all of the problems in detail (if any), people will be
able to think of ways around them. post them here!

On Wed, Nov 12, 2008 at 3:57 PM, Jessie Lawrence <email address hidden> wrote:
> also, we have plenty of time to implement something like this, but
> only if someone gets to work on this NOW. before its too late,
> otherwise it will be another one of those failed features that didnt
> make it.
>
> On Wed, Nov 12, 2008 at 3:55 PM, Jessie Lawrence <email address hidden> wrote:
>> whats controversial about security? if encrypting the users home
>> directory (other than the public folder) by default doesnt cause any
>> problems, then there is no reason why it shouldnt be. if there are
>> problems, enlighten me.
>>
>> plus, you should be able to enable and disable this feature through
>> one of the settings windows in gnome-control-center, such as in System
>>> Preferences > Encryption and Keyrings.
>>
>> On Wed, Nov 12, 2008 at 1:49 AM, Dustin Kirkland
>> <email address hidden> wrote:
>>> On Wed, Nov 12, 2008 at 2:50 AM, Jessie Lawrence <email address hidden> wrote:
>>>> ok, cool. but i think that there should be a way to enable this through the
>>>> gui, like in mac
>>>
>>> Perhaps. There's some problems with this, at least in my head, that I
>>> don't know how to solve yet. We'll see.
>>>
>>>> also, is there any particular reason why it should not be enabled by
>>>> default? are there any problems with it?
>>>
>>> This is a very controversial topic. Ubuntu users like choice. They
>>> don't like something being forced upon them. Especially something
>>> controversial.
>>>
>>> :-Dustin
>>>
>>> --
>>> anyone with a livecd can acces data on ubuntu -- encrypt home directories
>>> https://bugs.launchpad.net/bugs/277894
>>> You received this bug notification because you are a direct subscriber
>>> of the bug.
>>>
>>> Status in "ecryptfs-utils" source package in Ubuntu: In Progress
>>>
>>> Bug description:
>>> all of my personal files i store in ubuntu can be accessed by anyone with a livecd without knowing my password. mac actually locks your personal data by default so if you put a livecd in and try to access them it will prompt you for the password. ubuntu does not have this. this renders all of my personal files insecure. this seems pretty serious to me.
>>>
>>> try using a livecd to read data from your home folder on a mac and see what happens. this is what should happen in ubuntu.
>>>
>>> once again, seeing as this applies to everyone on a default setup and how it allows anyone to see all of the files on the computer without a password, including extremely private and critical ones, and seeing as how you can eveen delete these files too, it seems pretty serious to me.
>>>
>>
>