Why is it that when I go to Applications > Accessories > Passwords and Encryption Keys I can click on Passwords, then expand 'login' and then I can see my passwords for my MSN account and wireless networks I connect to without once being prompted for my user password?
But then when I change CPU Frequency scaling, I'm prompted to enter my admin password?
O.o
How to reproduce:
1. Restart your computer and login. Do not enter any passwords after your desktop has loaded.
2. Go to Applications > Accessories > Passwords and Encryption Keyrings
3. Click on the 'Login' folder to drop down and view the programs that store data here.
4. Double click on something you want to look at.
5. Click Password to show some dots, then uncheck the box below the dots marked "Show password"
6. Note that throughout this whole procedure, not once were you prompted* to enter in anything that verifies you are authorized to view this information.
*The only prompt is asking if it's allowed access to the keyring, to which anyone can click allow.
Links all in one place:
Bug report filed on Launchpad
OMG! UBUNTU! Blog Post
Gnome-keyring mailing list
Gnome Keyring Security Philosophy
Ubuntu Brainstorm Idea
-------
Bookmarks