Re: [Meego-handset] [N900 DE] DE Architecture discussions in the future

2011-05-05 Thread Alberto Mardegan

On 05/05/2011 04:02 PM, Carsten Munk wrote:

Please indicate on the mailing list if you'd be interested in
contributing to this work. If you know anyone who'd like to contribute
some of their free time with experience and knowledge within the field
to be improving DE and MeeGo on handsets, please refer them to this
mailing list thread as well.


I'll also try to help.
Now I'm working in the Accounts & SSO team, and before that I developed the 
mission-control Telepathy daemon.


Ciao,
  Alberto

--
http://blog.mardy.it <-- geek in un lingua international!
___
MeeGo-handset mailing list
MeeGo-handset@lists.meego.com
http://lists.meego.com/listinfo/meego-handset


Re: [Meego-handset] About missing usage of Accounts & SSO

2011-03-29 Thread Alberto Mardegan

On 03/29/2011 06:17 PM, Patrick Ohly wrote:

Some tester pointed out that signond logs the username/password as plain
text in the system log (accessible by root); clearly that isn't
desirable,


Indeed. It has been fixed in the repository, I'll soon push it to OBS.


but the much bigger gap is that the same information can also
be read without root privileges in the unencrypted ~/.signon databases -
in MeeGo, at least.


For the encryption to work, we need to write a plugin implementing the 
AbstractKeyManager interface: this plugin should emit some keys which will be 
used to encrypt/access the secure storage.
In Maemo Harmattan we have such a plugin [0], which uses the SIM card 
authentication key, so that the secure storage is enabled only when a SIM card 
is inserted (and not any SIM, actually :-) ). But it uses libCellularQt, which 
AFAIK is not available in MeeGo.


To force encryption, we could just write a simple plugin which always emits an 
hardcoded key, or somehow integrate with the screen unlocking process and have 
it unlock the secure storage too.


Ciao,
  Alberto

[0]: http://gitorious.org/accounts-sso/signon-sim-dlc-extension

--
http://blog.mardy.it <-- geek in un lingua international!
___
MeeGo-handset mailing list
MeeGo-handset@lists.meego.com
http://lists.meego.com/listinfo/meego-handset


[Meego-handset] About missing usage of Accounts & SSO

2011-03-29 Thread Alberto Mardegan

Hi all,
  I'm the maintainer of the MeeGo Accounts & SSO packages. I had a quick look 
at the gitorious project for the handset UX, and it seems to me that none of the 
applications are using the Accounts & SSO framework.


Why is it so? Is it in the roadmap to use it?
Will there be a separate account configuration application (or a CP applet), or 
is it the plan that if you have a Google account you need to configure it 
multiple times, once per application?


Please let me know if I can be of help; I'd really like to see MeeGo use the 
accounts & SSO framework in the same way that Maemo Harmattan is doing.


Ciao,
  Alberto

BTW, are there any documents describing how applications should look like, or is 
the UI design up to the developer?


--
http://blog.mardy.it <-- geek in un lingua international!
___
MeeGo-handset mailing list
MeeGo-handset@lists.meego.com
http://lists.meego.com/listinfo/meego-handset