Re: Does KDM need a password?

[Dotan Cohen <dotancohen@gmail.com>]

2009/1/25 Paolo <oopla@users.sf.net>:
> On Sun, Jan 25, 2009 at 10:32:10PM +0200, Bogdan wrote:
>>
>> BIOS password can be reset after gaining access to the laptop's mainboard (or maybe even easier).
>
> yep, there are bios-pwd crackers on the 'net; but if HDD is also protected,
> with it's own pwd, and bios just asks for HDD pwd, things are a bit harder,
> since access attempts may result in data wipe out, depending on HDD sec
> setting.
>
>> However, if you are not using filesystem encryption then KDM (login) pass doesn't add much in terms of data security.
>
> zero, indeed, once you've access to hardware.
>

Thanks for the info. I see that I can safely disable the KDM password.
If this laptop were to get 'lost' then it would be sold unmodified.
The local thieves are not very sophisticated, yet. The only question
would be if someone were to steal this laptop with the intend of
finding something about _me_ and I see that as a remote enough
possibility (and a small enough threat were it to happen) that I do
not use a screen lock. The BIOS password is only to thwart the thieves
from profiting from their crime, not to aid in recovery or to prevent
them from reading my Gmail.

Thanks for everyone's insight!

-- 
Dotan Cohen

http://what-is-what.com
http://gibberish.co.il

א-ב-ג-ד-ה-ו-ז-ח-ט-י-ך-כ-ל-ם-מ-ן-נ-ס-ע-ף-פ-ץ-צ-ק-ר-ש-ת
ا-ب-ت-ث-ج-ح-خ-د-ذ-ر-ز-س-ش-ص-ض-ط-ظ-ع-غ-ف-ق-ك-ل-م-ن-ه‍-و-ي
А-Б-В-Г-Д-Е-Ё-Ж-З-И-Й-К-Л-М-Н-О-П-Р-С-Т-У-Ф-Х-Ц-Ч-Ш-Щ-Ъ-Ы-Ь-Э-Ю-Я
а-б-в-г-д-е-ё-ж-з-и-й-к-л-м-н-о-п-р-с-т-у-ф-х-ц-ч-ш-щ-ъ-ы-ь-э-ю-я
ä-ö-ü-ß-Ä-Ö-Ü