2

Screen locking is a great feature - our session will be automatically locked/blocked and password is required to unlock it. It also have worst think in the world - it locked screen even i watching video or some think. Also allow application tells: Don't look screen is insecure.

What we can do? Firstly we should understood not each application have data we will protect. Also application without this data can provide button, that tells we do private think. Graphic environment could also have similar button, with turn on screen locking. It will brink new security layer.

Ok. But what with application, that don't use this API? Locker should think about it is broken and translate/process private data.

Ok - but I must tell you about my solution. Solution is rather simple. KDE team should add API to tell, which WINDOW/Application process/displaying private documents/data. This data should be delivered by application. If screen should been locked, only application that set own state do not private will be show. All plasmoids don't working with new api will be hide. All application don't working with new API will been hide. Additionally, operations like: open file, run program, etc. needs to unlock desktop. So we can't run new instances of application.

Each application should know we working in presentation/more secure mode, so application can hide options, like: open file, editing a document, sending data via net, etc.

Now looks at this:
1)I can open movie in movie player, go out and each other application(excluding movie player) will be hidden. Now girlfriend can watch movie and don't have option to broke any think. She can only looks on my desktop, but can't open any places/folders, running any application, etc.

2)I can play music. For some time anybody can shut down sound, change file to playing, but cannot manage play list.

Also, very usefull can be option to lock screen on selected desktop, so user can only use window on active desktop. When somebody tries to switch desktop, he/she must input password. Also, without password nobody can run new programs, etc.

In my opinion it could been great usability and security helper. There are some application, which never show private data and application always showing private document. Why block whole desktop?

We can also integrates this with Nepomuk and Window Manager(KWIN). If somebody open document with tag 'private', application automatically goes private, so in presentation mode each window of this application will be hidden. User can also click on border and select mark this window as non-private, so it will be showed on private mode, but don't receives any signals. User can also select mark this window as private, so even application tries tell locker, that it don't operate on private data, it will been hidden.

Of course, there are always small %, that we don't like to show girlfriend photos. For this people we should support old mechanism.

I doubt nobody understands my idea!

It will solve problems will screen looks and brinks new way to secure desktop - we can't run any debugging toll and we can using/seen of results of programs processing secrets.

Once screen is locking in my mode, we still can working with normal programs, ex. Kaffeine, Dragon Player, but if we open file contains private tag, application should seen that and tell my tool, oupsss I will process secure data.

Is the problem to redesign Window Managers to not showing windows of application, that isn't integrated with this mechanism and do not show windows of programs, that processing secrets?

Ok. Idea was probably realized in KDE5. There's option to disable screen locking on some activities. I think, we could add activity, witch user cann't remove or change some settings called "unprivate". User cannot place plasmoids on it or change container type and cannot change settings about screen locking. Instead of look screen, we can switch to unprivate. When user tries to switch activity from unprivate or run program on unprivate activity KDE will prompt for password.

This idea can probably be realized on Wayland session. What do you think?