Comment 6 for bug 277894

Revision history for this message
Jessie Lawrence (nightwolf177-deactivatedaccount) wrote : Re: [Bug 277894] Re: anyone with a livecd can acces data on ubuntu -- encrypt home directories

hmm, thats strange. thats what happened to me. and i was even using 10.4

i put in the ubuntu live cd and when i tried to backup some files, i couldnt
unless i entered the right password and stuff, and then i only had access to
the public folder. that was my experience, i didnt read about it anywhere. i
dont even know what filevault is, but whatever it is, it sounds like
something cool that should be enabled by default, especially on laptops. i
think ubuntu should do that by default.

maybe i accidentally enabled something without realizing it. back then when
i tried it, i dont remember how familiar i was with mac.

On Tue, Nov 11, 2008 at 8:55 AM, Dustin Kirkland
<email address hidden>wrote:

> http://docs.info.apple.com/article.html?path=Mac/10.5/en/8736.html
>
> It looks like it's an optional configuration parameter, rather than
> being done by default...
>
> :-Dustin
>
> --
> anyone with a livecd can acces data on ubuntu -- encrypt home directories
> https://bugs.launchpad.net/bugs/277894
> You received this bug notification because you are a direct subscriber
> of the bug.
>
> Status in "ecryptfs-utils" source package in Ubuntu: In Progress
>
> Bug description:
> all of my personal files i store in ubuntu can be accessed by anyone with a
> livecd without knowing my password. mac actually locks your personal data by
> default so if you put a livecd in and try to access them it will prompt you
> for the password. ubuntu does not have this. this renders all of my personal
> files insecure. this seems pretty serious to me.
>
> try using a livecd to read data from your home folder on a mac and see what
> happens. this is what should happen in ubuntu.
>
> once again, seeing as this applies to everyone on a default setup and how
> it allows anyone to see all of the files on the computer without a password,
> including extremely private and critical ones, and seeing as how you can
> eveen delete these files too, it seems pretty serious to me.
>