[vmchecker-dev] login timeout

[Lucian Adrian Grijincu]

On Mon, Apr 12, 2010 at 11:01 AM, Claudiu-Dan Gheorghe
<claudiugh at gmail.com> wrote:
> Please remove the login timeout or increase it to at least 3h.

Only if we have a "remember me on this computer" check box.


> It's very annoying and doesn't improve security at all,

In this version of vmchecker we don't display private information to
the student.
The only thing bad that can happen is someone uploading some fake hw
for someone else.

A feature I'm dreaming about is letting assistants commend on
student's sources à la github (line of file comments).
We'll need to protect sources in when this will go online.

If we'll let users opt into having their session saved (remember me on
this computer checked) we'll need to test this thoroughly beforehand
preferably in an environment that cannot lead to bad stuff happening
if it does not work really well.



> because you
> won't submit and work on a homework from a public computer ever.

You'd be amazed!
People in general do a lot of stupid things and there will always be
someone out there doing something so completely moronic you won't
believe it's true.

I've logged out at least 10 gmail/yahoo accounts on computers in the
faculty. This year students of mine left the lab with yahoo still
logged in without rebooting the machine (the partitions are frozen and
session cookies would go away at reboot).

I *saw* a student having a problem with a homework, downloading it
from yahoo,  asking her colleagues about what to fix and uploading it.


Try searching on the local dc++ for passwords, private pictures ( :D )
(try stuff like "munte", "revelion", "mare", "vama" or toponyms
Bucegi, Dorna, Ceahlău, etc.)

Think about this for a change: http://sshkeygen.com/ and check the
TODO list: http://sshkeygen.com/about.php

-- 
 .
..: Lucian