--0eh6TmSyL6TZE2Uz
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Thu, Sep 04, 2003 at 08:08:04AM +0200, Martin Konold wrote:
> If you decide not to lock your screen you simply leave your account to be=
=20
> used/abused. Any extra complexity in order to save you from the initial=
=20
> failure (not locking the screen) is doomed to fail.=20
>=20
> If you don't want other people to access your data or steal your identity=
 you=20
> simply cannot leave the screen unlocked.=20
>=20
> In general adding extra "security" features which dont really work only=
=20
> provides people with a missleading impression about their security status=
.=20
>=20
> KDE provides for friends and children in need to check their webmail etc.=
 a=20
> nice offer to open another session for them if the screen is locked=20
> currently.

I'm afraid I have to disagree with you here. I leave my screen unlocked at =
home
and generally at work, but mainly because everyone in the office has sudo a=
ccess
to all the machines anyway, and at home, there are a couple of people with =
the
root password.

That does not, however, mean that I want everyone to be able to use my GnuPG
key, for instance. It also doesn't mean that I want them to be able to do t=
hings
like login as me on all the sites I have privileged access to, or my webmai=
l, or
whatever.

Sometimes the concept of multiple levels of security is called for; this is=
 one
of these times.

--=20
Daniel Stone                                              <daniel@fooishbar=
.org>
http://www.debian.org - http://www.kde.org - http://www.freedesktop.org
"Configurability is always the best choice when it's pretty simple to imple=
ment"
  -- Havoc Pennington, gnome-list

--0eh6TmSyL6TZE2Uz
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iEYEARECAAYFAj9W+ZUACgkQcPClnTztfv1zxgCfUvpVPx/hQ/P4awQggodj0FfQ
hf0Anj4W0ZOGC9NFFfPNq/rNEoEF7Kaa
=/bQl
-----END PGP SIGNATURE-----

--0eh6TmSyL6TZE2Uz--