| 2011-10-20 15:07:38 |
Matthew Paul Thomas |
bug |
|
|
added bug |
| 2011-10-20 15:07:45 |
Matthew Paul Thomas |
ubiquity (Ubuntu): assignee |
|
Matthew Paul Thomas (mpt) |
|
| 2011-10-20 15:07:54 |
Matthew Paul Thomas |
bug task added |
|
gnome-control-center (Ubuntu) |
|
| 2011-10-20 15:08:01 |
Matthew Paul Thomas |
gnome-control-center (Ubuntu): assignee |
|
Matthew Paul Thomas (mpt) |
|
| 2011-10-20 15:08:13 |
Matthew Paul Thomas |
description |
If you have a user account with a password, someone with physical access to your computer can still access your account by holding down Shift during startup, choosing recovery mode, and changing your password.
There is an intractable problem. For example, from Microsoft's "10 immutable laws of security": "If a bad guy has unrestricted physical access to your computer, it's not your computer anymore". <http://technet.microsoft.com/en-gb/library/cc722487.aspx#EIAA>
However, probably it isn't obvious to a non-professional that a password alone isn't enough to secure their stuff.
So perhaps, wherever Ubuntu lets you set a password (Ubiquity, System Settings "User Accounts"), it should contain a brief (very brief) explanation of this. Something like: "A password doesn’t protect against someone with physical access to the computer." |
If you have a user account with a password, someone with physical access to your computer can still access your account by holding down Shift during startup, choosing recovery mode, and changing your password.
This is an intractable problem. For example, from Microsoft's "10 immutable laws of security": "If a bad guy has unrestricted physical access to your computer, it's not your computer anymore". <http://technet.microsoft.com/en-gb/library/cc722487.aspx#EIAA>
However, probably it isn't obvious to a non-professional that a password alone isn't enough to secure their stuff.
So perhaps, wherever Ubuntu lets you set a password (Ubiquity, System Settings "User Accounts"), it should contain a brief (very brief) explanation of this. Something like: "A password doesn’t protect against someone with physical access to the computer." |
|
| 2011-11-08 23:03:22 |
Brian Murray |
ubiquity (Ubuntu): status |
New |
Triaged |
|
| 2011-11-08 23:03:25 |
Brian Murray |
ubiquity (Ubuntu): importance |
Undecided |
Low |
|
| 2011-11-08 23:03:27 |
Brian Murray |
gnome-control-center (Ubuntu): importance |
Undecided |
Low |
|
| 2011-11-08 23:03:32 |
Brian Murray |
gnome-control-center (Ubuntu): status |
New |
Triaged |
|
| 2012-10-19 12:01:19 |
Dimitri John Ledkov |
ubiquity (Ubuntu): status |
Triaged |
Fix Released |
|
| 2012-10-22 09:03:32 |
Matthew Paul Thomas |
ubiquity (Ubuntu): status |
Fix Released |
Confirmed |
|
| 2014-02-21 13:17:39 |
Matthew Paul Thomas |
ubiquity (Ubuntu): status |
Confirmed |
In Progress |
|
| 2014-07-14 05:11:08 |
marllenka9801 |
bug task added |
|
libclass-spiffy-perl (Ubuntu) |
|
| 2015-03-25 10:20:04 |
Matthew Paul Thomas |
gnome-control-center (Ubuntu): status |
Triaged |
Confirmed |
|
| 2015-03-25 10:20:12 |
Matthew Paul Thomas |
ubiquity (Ubuntu): status |
In Progress |
Confirmed |
|
| 2020-03-05 11:55:18 |
Marcus Tomlinson |
ubiquity (Ubuntu): status |
Confirmed |
Incomplete |
|
| 2020-05-06 12:13:53 |
Marcus Tomlinson |
ubiquity (Ubuntu): status |
Incomplete |
Invalid |
|
