On Tue, June 3, 2008 07:53, Marius Gedminas wrote: > On Mon, Jun 02, 2008 at 08:34:02PM -0500, David Dyer-Bennet wrote: >> Marius Gedminas wrote: >> > On Mon, Jun 02, 2008 at 09:47:19AM -0500, David Dyer-Bennet wrote: >> >> When I hit the power button and select "lock device", I get an unlock >> >> dialog on the screen. And it *stays* on the screen, overnight, in my >> bag, >> >> wherever, until I unlock the device. That's unexpected behavior; it >> uses >> >> power (backlighting is on). >> > >> > Hm. Looks like a bug to me. The screen should turn off after the >> usual >> > timeout, in my opinion. >> >> How long is that, and is it configurable? > > 3 minutes IIRC and yes. Control panel -> Display -> Switch off display. > >> It was off when I pulled out >> of my bag just now, so apparently it does shut off eventually (and when >> I touched the screen the unlock keypad came back up, so the battery >> isn't just dead :-)). > > The device is very good at seamless power savings, but it's possible to > install buggy applications that aren't smart enough to sleep when they > should and drain the battery faster. Something like that may be going on, though I haven't installed very much. I'm assuming the application would have to be running to make a difference? Yesterday I started the day fully charged, and it spent the day in my shoulder bag, and when I unlocked it near bedtime to read for a little while (not having touched it since I took it off the charger in the morning), the battery was down to 3 days standby, 1 hour active. One thing I know happens now is that touching the screen turns on the backlight while locked. So sitting in the case in my bag may be turning on the backlight a lot, at least when I'm moving the bag around. On the other hand it spent most of the day on the floor, not being moved. >> > I normally use "Lock touch screen and keys", but perhaps that's not >> > secure enough for you. >> >> Yeah, it's not. The configurations for this have all my email passwords >> and such in them, and there may be ssh-agent with important keys active, >> and such. Leading possibly not only to my own servers, but to servers >> belonging to clients or such. Also my credit card numbers and the >> account pins and all that. So I try for fairly good security. > > pwsafe is good for credit card numbers & pins -- it always requires a > password after about a minute of inactivity. I want to install the maemo version of keepass, since that's what I'm using on Windows and Linux boxes (conveniently). I can migrate the data currently in my Palm to there for the secure bits, so I wouldn't have to worry about the security of the contacts database. > > Your point is very valid for email passwords and ssh keys. Hm... But that still leaves these being a problem. I can probably just be careful about ssh agent and keys, I don't use it *that* much on the N800. My fallback position on the email config would be to be prepared to change the password there on short notice, which is easy enough to do. It's a bit inelegant. Also anything where the browser is keeping the passwords for me would be at risk. I know *so* many people who have had portable electronic devices lost or stolen, I really do think it's a much bigger threat than desktop systems (I do know some people who have had those stolen as well, but not nearly as many). And, because it's Linux underneath, I tend to think in terms of the level of security I normally try to achieve on my linux boxes. I'm kinda left feeling that security was not considered in the design of the software system for this box. -- David Dyer-Bennet, dd-b@xxxxxxxx; http://dd-b.net/ Snapshots: http://dd-b.net/dd-b/SnapshotAlbum/data/ Photos: http://dd-b.net/photography/gallery/ Dragaera: http://dragaera.info _______________________________________________ maemo-users mailing list maemo-users@xxxxxxxxx https://lists.maemo.org/mailman/listinfo/maemo-users
