<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" version="2.0">
    <channel>
      <title>Christian Enderle - security</title>
      <link>https://chrenderle.de</link>
      <description>Developer website of Christian Enderle</description>
      <generator>Zola</generator>
      <language>en</language>
      <atom:link href="https://chrenderle.de/tags/security/rss.xml" rel="self" type="application/rss+xml"/>
      <lastBuildDate>Thu, 02 Apr 2026 00:00:00 +0000</lastBuildDate>
      <item>
          <title>Simple travel security measures for laptops (with KDE)</title>
          <pubDate>Thu, 02 Apr 2026 00:00:00 +0000</pubDate>
          <author>Christian Enderle</author>
          <link>https://chrenderle.de/blog/2026-04-02-simple-travel-security-measures-for-laptops/</link>
          <guid>https://chrenderle.de/blog/2026-04-02-simple-travel-security-measures-for-laptops/</guid>
          <description xml:base="https://chrenderle.de/blog/2026-04-02-simple-travel-security-measures-for-laptops/">&lt;h1 id=&quot;motivation&quot;&gt;&lt;a class=&quot;header-anchor no-hover-padding&quot; href=&quot;#motivation&quot; aria-label=&quot;Anchor link for: motivation&quot;&gt;&lt;span class=&quot;link-icon&quot; aria-hidden=&quot;true&quot;&gt;&lt;&#x2F;span&gt;&lt;&#x2F;a&gt;
Motivation&lt;&#x2F;h1&gt;
&lt;p&gt;In some conversation recently, I learned that in some train stations thieves walk through the train, while it is stopping. They then grab devices and run. This lead me to think of the consequence if that happened to me. Since I use a password manager, it is sometimes unlocked. If a thief would grab the laptop and not close the lid, they could discover my still unlocked password manager.&lt;&#x2F;p&gt;
&lt;h1 id=&quot;lock-password-manager-after-some-inactivity&quot;&gt;&lt;a class=&quot;header-anchor no-hover-padding&quot; href=&quot;#lock-password-manager-after-some-inactivity&quot; aria-label=&quot;Anchor link for: lock-password-manager-after-some-inactivity&quot;&gt;&lt;span class=&quot;link-icon&quot; aria-hidden=&quot;true&quot;&gt;&lt;&#x2F;span&gt;&lt;&#x2F;a&gt;
Lock password manager after some inactivity&lt;&#x2F;h1&gt;
&lt;p&gt;So a first measure would be to configure my password manager to automatically lock the store after some inactivity. In KeePassXC this was not set by default in the past. Though this changed after an security assessment by the BSI (&lt;a rel=&quot;external&quot; href=&quot;https:&#x2F;&#x2F;github.com&#x2F;keepassxreboot&#x2F;keepassxc&#x2F;pull&#x2F;12689&quot;&gt;see here&lt;&#x2F;a&gt;). I usually set this to 240 seconds = 4 minutes. When I travel, manually change it to 60 seconds. But since I have to do this manually everytime, it is prone to forgetting. Furthermore, there are still 60 seconds that a thief has to to see the unlocked password manager.&lt;&#x2F;p&gt;
&lt;h1 id=&quot;automatic-lock-when-unplugging-charger&quot;&gt;&lt;a class=&quot;header-anchor no-hover-padding&quot; href=&quot;#automatic-lock-when-unplugging-charger&quot; aria-label=&quot;Anchor link for: automatic-lock-when-unplugging-charger&quot;&gt;&lt;span class=&quot;link-icon&quot; aria-hidden=&quot;true&quot;&gt;&lt;&#x2F;span&gt;&lt;&#x2F;a&gt;
Automatic lock when unplugging charger&lt;&#x2F;h1&gt;
&lt;p&gt;Yesterday I thought of a much more effective measure for the cases where you can charge your laptop. In KDE (and probably other desktop environments too) you can configure to execute a command when your laptop exits the state &quot;On AC Power&quot;. Setting the command to &lt;code&gt;loginctl lock-session&lt;&#x2F;code&gt; makes the laptop lock automatically when it is unplugged. Of course this also happens when you unplug your laptop by intention. Though I&#x27;m personally not bothered by this (so far). Of course you also need to think of plugging in your laptop. If you forget this, the measure won&#x27;t work.&lt;&#x2F;p&gt;
&lt;p&gt;&lt;img src=&quot;https:&#x2F;&#x2F;chrenderle.de&#x2F;blog&#x2F;2026-04-02-simple-travel-security-measures-for-laptops&#x2F;kde-power-management.png&quot; alt=&quot;KDE power management settings, power profile &amp;#39;On AC Power&amp;#39;, &amp;#39;Run command or script&amp;#39; set to &amp;#39;Choose run conditions&amp;#39;, &amp;#39;When exiting &amp;quot;On AC Power&amp;quot; state&amp;#39; set to &amp;#39;loginctl lock-session&amp;#39;&quot; title=&quot;KDE Power Management Settings&quot; &#x2F;&gt;&lt;&#x2F;p&gt;
&lt;p&gt;This means that if a thief grabs your laptop and runs, the laptop automatically locks. When you don&#x27;t sit somewhere where you have mains power to plugin your charger, you can plug your laptop in a power bank. A thief will probably not also steal your powerbank. Unless it is a targeted attack, where they have knowledge of this measure. But then you have other worries. Mostly, why are you targeted in the first place?&lt;&#x2F;p&gt;
</description>
      </item>
    </channel>
</rss>
