Mailinglist Archive: opensuse-factory (710 mails)

[Sid Boyce <sboyce@xxxxxxxxxxxxxxxx>]

On 19/06/11 19:07, Markus Slopianka wrote:
> > So, why not change to a manual log in. Why not? It´s more secure in the
> > case, that there´s someone other in your family, who wants to change
> > your files, or just read them (this could be happen.).
> >
> > The question is not: "Why should we do it?" It´s just "Why *shouldn´t*
> > we do it?"
> If there is only a single user account present, logging in automatically is 
> better
> usability.
Better than having the extremely onerous task of entering a few 
additional keystrokes - I'll have to sleep on that one for a few years.
> Autologin allows the system to fully boot up incl. to connect to WLANs and not 
> stop at
> KDM. During boot one can leave the room.
All that is accomplished in runlevel 3, so I don't see what great 
benefit is gained - even life and death surgery has to wait until the 
ambulance has arrived, patient transported to theatre and the surgeon 
scubs up, dons his apron and gloves and considers how to proceed.

> If more than one account is created, the account manager should ask to disable 
> autologin.
>
> Seriously, you are just a corner case and corner cases like you can be bothered 
> to untick
> a little checkbox once.
> If you really want that rudimentary security, a way better option is to enable 
> autologin
> but then set the option to automatically lock the screen after login. That way 
> the system
> loads completely (incl. network connections) and your corner case is still 
> solved.
No corner case, no significant loss of time, no death resulting and no 
chance of a malpractice suit.
Automatically log in in a work setting and you could lose a promising 
career. I have had people at work trying to guess my password.
I went to do some work on a relative's Linux box and needed ssh access 
to my box at home to download some files if needed. A day later I 
remembered that ssh was still allowed through my smoothwall firewall box 
and the logs were full of password cracking attempts.
Slack practices breed insecurity.
Regards
Sid.

--
Sid Boyce ... Hamradio License G3VBV, Licensed Private Pilot
Emeritus IBM/Amdahl Mainframes and Sun/Fujitsu Servers Tech Support
Senior Staff Specialist, Cricket Coach
Microsoft Windows Free Zone - Linux used for all Computing Tasks

--
To unsubscribe, e-mail: opensuse-factory+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse-factory+help@xxxxxxxxxxxx