Security issue and addon on lock screen


William
 

Hi all,

Currently, when your nvda is installed, you get an option to copy current configuration to the lock screen.

However, in view of the recent security issue, I would like to know, how can I copy the configuration to the lock screen without copying addons and their respective data?


Thanks,

William


Luke Davis
 

William wrote:

However, in view of the recent security issue, I would like to know, how can I copy the configuration to the lock screen without copying addons and their respective data?
There is no supported way to do that.
You might be able to pull it off, by renaming your %appdata%\nvda\addons folder and %appdata%\nvda\addonsState.pickle files to backup versions, then restarting NVDA, copying settings, then reversing the process; but do things like that at your own risk. (Note that this is utterly untested.)

If you are running the latest NVDA, the significant security issues have been addressed.
There is no more risk now than there ever was in copying add-ons to secure screens.

Make sure all your add-ons, and especially NVDA itself, are as up to date as possible; and re-copy settings to secure screens when you update add-ons.

Luke


William
 

Luke, hi long time no see.

Noted, so everytime when I upgrade my nvda, I have to reclick the copy configuration to lock screen again.


Luke Davis 於 4/3/2022 18:08 寫道:

William wrote:

However, in view of the recent security issue, I would like to know, how can I copy the configuration to the lock screen without copying addons and their respective data?
There is no supported way to do that.
You might be able to pull it off, by renaming your %appdata%\nvda\addons folder and %appdata%\nvda\addonsState.pickle files to backup versions, then restarting NVDA, copying settings, then reversing the process; but do things like that at your own risk. (Note that this is utterly untested.)

If you are running the latest NVDA, the significant security issues have been addressed.
There is no more risk now than there ever was in copying add-ons to secure screens.

Make sure all your add-ons, and especially NVDA itself, are as up to date as possible; and re-copy settings to secure screens when you update add-ons.

Luke





 

What I have done is copy my configuration without loading addons.

However you probably don't need to configure lock screen at all.

After all its 1 dialog, you don't need it to speak that well just enough to read the fields and the buttons.

I use narator for my lock screens, and thats about it.

With win11 its harder to not have to enter security info, for my win10 systems I use them then turn them off and never lock or unlock but if I did default config works well enough to access lock screen.

You really only need the lockscreen to read and enter the information, as long as it reads, then it doesn't matter how crappy it sounds or reads but just as long as you can read enough to interact with it no matter how crappy it sounds or can be is fine.

On 4/03/2022 10:09 pm, William wrote:
Hi all,

Currently, when your nvda is installed, you get an option to copy current configuration to the lock screen.

However, in view of the recent security issue, I would like to know, how can I copy the configuration to the lock screen without copying addons and their respective data?


Thanks,

William







.


Luke Davis
 

William wrote:

Luke, hi long time no see.
Hello! Yes, glad to be back.

Noted, so everytime when I upgrade my nvda, I have to reclick the copy configuration to lock screen again.
You don't have to, but in my opinion it's a good idea, in order to upgrade any add-ons installed to the secure screens copy.

Luke


Luke Davis
 

Shaun Everiss wrote:

However you probably don't need to configure lock screen at all.
After all its 1 dialog, you don't need it to speak that well just enough to read the fields and the buttons.
What is one dialog?

If you're talking about the lock screen itself, sure, but what about when running an installer, using an elevated command prompt, and various other things? I'd much rather have NVDA in those situations than narrator. But to each his own.

Luke


 

Hmmm after enabling admin rights it usually just switches over.

As for security, often I install nvda and after setting things to what I need without addons I save my settings.

The lockscreen or any elevated admin prompts do not have any addons.

Of course since I am an admin I have made it so user account control does not feature because I have older software and I can get more performance out of things.

Now if this system had more than 1 account or was a multiuser I certainly couldn't have that.

I don't even have a password on this system at all, and have never done so at least for the initial startup account.

Now obviously if I had a shared whatever, I'd probably have a root account that was like that and a normal account and yeah I could see your point.

On 5/03/2022 10:32 am, Luke Davis wrote:
Shaun Everiss wrote:

However you probably don't need to configure lock screen at all.
After all its 1 dialog, you don't need it to speak that well just enough to read the fields and the buttons.
What is one dialog?

If you're talking about the lock screen itself, sure, but what about when running an installer, using an elevated command prompt, and various other things? I'd much rather have NVDA in those situations than narrator. But to each his own.

Luke