[Bug 267086] Re: Changing passwords without asking for the original one

2008-09-09 Thread Alan Pope
This isn't a bug, it's working as designed.

The fact is to perform these steps you need physical access to the
machine in question. If you have physical access to a machine, then all
bets are off, you've got full access to the system. You could remove the
hard drive and put it in another machine and read the files, or in the
case of a laptop, pick up the entire machine and walk away with it.

You can mitigate this by encrypting the drive on your machine. This will
make it impossible to do these steps without knowing the key used to
encrypt the drive.

** Changed in: ubuntu
   Status: New = Invalid

-- 
Changing passwords without asking for the original one
https://bugs.launchpad.net/bugs/267086
You received this bug notification because you are a member of Ubuntu
Bugs, which is a direct subscriber.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 267086] Re: Changing passwords without asking for the original one

2008-09-09 Thread CrownDude
Thanks Alan,

As someone who has been using Linux for a while I find this shocking
though. I have a BIOS password running aswell, but if I compare it to
some other OS's it doesn't look good. Why is this designed in this way?
Is it all distro's thats like this? And don't you think this should be
changed?

Also, doesn't encryption reduce performance?

-- 
Changing passwords without asking for the original one
https://bugs.launchpad.net/bugs/267086
You received this bug notification because you are a member of Ubuntu
Bugs, which is a direct subscriber.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 267086] Re: Changing passwords without asking for the original one

2008-09-09 Thread Alan Pope
If you have a BIOS password then this will stop the casual person from
walking up to your PC and rebooting into single user mode - as would
encryption. If you compare it to other OS's it's the same. If I am
standing at your computer and you're running Windows, OSX or Linux, I
(and you don't use encryption) then I can probably get access to all
your data and change your password.. It's not unique to Linux.

In some heavy use applications it's possible that encryption may degrade
the performance of the system. However for most 'average' users they
will not notice the difference. There are many articles online about
disk encryption performance.

-- 
Changing passwords without asking for the original one
https://bugs.launchpad.net/bugs/267086
You received this bug notification because you are a member of Ubuntu
Bugs, which is a direct subscriber.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 267086] Re: Changing passwords without asking for the original one

2008-09-09 Thread CrownDude
Okay thanks man. Did a bit of searching and found it is posible in
Windoze, just not that easy it seems.

Thanks for clearing it up.

-- 
Changing passwords without asking for the original one
https://bugs.launchpad.net/bugs/267086
You received this bug notification because you are a member of Ubuntu
Bugs, which is a direct subscriber.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 267086] Re: Changing passwords without asking for the original one

2008-09-08 Thread Jamie Strandboge
** Visibility changed to: Public

-- 
Changing passwords without asking for the original one
https://bugs.launchpad.net/bugs/267086
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs