If the device is encrypted and single-user there is no good reason to require further login after the first. If user is AFK then it locks, but then they should only need to type in that password. All this inconvenience is due to overlapping security practices that aren't designed together.
sudoreboot
joined 4 years ago
If you had to ruin an entire app/website by integrating automatic logout, which app would you choose to achieve maximum damage?
If you had to ruin an entire app/website by integrating automatic logout, which app would you choose to achieve maximum damage?
What's a foreign movie you want to watch but you can't because it's too obscure to have any sort of translation?
US centrism. I tried to unsub from the worst offending communities, but I still am unable to scroll down a page without seeing something obviously only relevant to the US or tainted by yankee culture. posts and comments assume everyone is USian and anyone who isn't is treated like a foreigner.
It made my mood worse, affecting my daily life. So I cut down, and now I barely go there at all.
My assumption was that the user sets the decryption password. Yes, if the decryption password is not your own then you may want your own password on top of that. The point was that there is in principle no reason for requiring the user to enter more than one personal password per session.