Educause Security Discussion mailing list archives

Re: passworded screen savers with timeouts, why?


From: Selden E Ball Jr <seb () LEPP CORNELL EDU>
Date: Thu, 14 Dec 2006 17:00:47 -0500

Mike wondered

 We are in the implementation stage of password and workstation
policies. My questions, which comes from a number of users, is why a
screen saver with a timeout period that requires entering a password
when unlocking the screen saver?

What alternatives are being considered?

The term "screensaver" is a misnomer these days, since most really
don't try to prevent phosphor burnin, the original intent.

"Password protected screensavers with timeouts" are a way to
a) prevent unauthorized access to a desktop system
b) when the user leaves for an unexpectedly long time
c) without losing whatever work is currently in progress.

The alternatives that I can think of are worse:

a) leave the computer desktop unprotected when one is
   away from the physical desk -- you don't know who might wander by
   who would be interested in what you're doing or who might make
   some unnoticed modification to something.

b) always having to remember to manually lock the desktop -- it's too easy
   to forget

c) forcing a complete logout may cause the loss of work and certainly
   a loss of time when one has to reopening all the programs and
   windows that were in use.


Selden
======
Selden E. Ball, Jr.

Cornell University                        Voice: +1-607-255-0688
Laboratory for Elementary-Particle Physics  FAX: +1-607-255-8062
LT105 R. R. Wilson Laboratory              http://www.lepp.cornell.edu/~seb/
Dryden Road                            Internet: SEB () LEPP CORNELL EDU
Ithaca, NY, USA 14853-8001          HEPnet/SPAN: LNS62::SEB = 44284::SEB

Current thread: