it is safer to assume the user is at a public computer.