'Andrzej Andrzej' via qubes-devel: > I know that these two proposals may seem paranoid about security, so they > could be at least optional and not default. I would like to have them enabled. > > 1. When decrypting the drive and entering the password after eg 4 incorrect > passwords, the data could start to be erased. Maybe this is not an amazing > option because the drive is encrypted but it is always an additional security > measure in case of unauthorized attempt to access the computer. > > 2.Automatic screen lock every x minutes. I'm not talking here about a screen > saver that works in a situation of inactivity. I am talking here about a tool > that for example every 60 minutes would automatically block the screen with > password. It may seem that this option does not make sense because there is > a screen saver. Keep in mind that the screen saver will not work when someone > pulls us away from the computer by force and use computer. If my option was > implemented in Qubes OS then even in this situation it would be difficult to > use the computer because after x minutes the computer would want the password > even in the case of continuous user activity. >
These are valid concerns, but as you say not for everybody. But you can set this up yourself, especially the second one. About the first option read here: https://unix.stackexchange.com/questions/204669/automatically-shred-luks-partition-upon-x-failed-decryption-attempts#204681. They second option you can setup by putting a cronjob for xflock4. -- You received this message because you are subscribed to the Google Groups "qubes-devel" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-devel/q6u74g%247bka%241%40blaine.gmane.org. For more options, visit https://groups.google.com/d/optout.
