Filipus Klutiero wrote: > Package: desktop-base > Version: 4.0.1 > Severity: wishlist > > desktop-base is installed by default and replaces kdm's default theme by > a theme which doesn't allow selecting the user from a list. This reminds > me a bit too much Sarge's gdm (as it is configured on my desktop, at > least). > > >
Hi Filipus, Although we all appreciate the user selection interface I am not convinced that we want it running 'by default' on all desktops. The difficult thing here is that in some (possibly many) cases you do not want your login screen to list the 'known' users. This alone presents a basic security risk and could allow an intruder to use this list to their advantage. For home users this poses no real problem, but for networks this could be a very real problem for groups of people who authenticate against the network. This is worse for medium to large size businesses or schools that have a long list of users. So as a result it is better to err on the side of caution and not provide the list by default. Maybe what we should do is provide an alternate version of the theme that the user can switch to if they choose. Maybe this should also be available by default and not require further installs. Thanks, Matthew -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
