Re: Keeping it 'eyes only' was Re: OS X first timer - blank password

2004-12-07 Thread Bruce Johnson
On Saturday, December 4, 2004, at 10:21 AM, Andrew Kershaw wrote:
But it's interesting that the password can be bypassed if the user 
pulls a stick of RAM and resets PRAM 3 times thereafter...  Do you 
think that's an Apple-designed back door?

Yes, absolutely. Otherwise a random stranger, disgruntled 
soon-to-be-ex-employee, or you, in a particularly forgetful moment, 
could go up to the computer and render it useless.

A firmware or bios password has to have *some* means of 
non-authenticated reset.

--
"Wherever you go, there you are." - B. Banzai, Ph.D.
Bruce Johnson

--
G-Books is sponsored by  and...
Small Dog Electronicshttp://www.smalldog.com  | Refurbished Drives |
-- Check our web site for refurbished PowerBooks  |  & CDRWs on Sale!  |
 Support Low End Mac 
G-Books list info:  
 --> AOL users, remove "mailto:";
Send list messages to:  
To unsubscribe, email:  
For digest mode, email: 
Subscription questions: 
Archive: 

---
The Think Different Store
http://www.ThinkDifferentStore.com
---



Re: Keeping it 'eyes only' was Re: OS X first timer - blank password

2004-12-04 Thread kochkodin

Andrew Kershaw wrote:
 Open Firmware password protection can be bypassed if the user
changes
the physical memory configuration of the machine and then resets the 
PRAM 3 times
(holding down command-option-P-R during boot).
Funny..Every Apple Tech I have ever spoken to has recommended that if it 
is necessary to reset the PRam..it should be held down until it has 
dinged at least 3 times
Mike K

--
G-Books is sponsored by  and...
Small Dog Electronicshttp://www.smalldog.com  | Refurbished Drives |
-- Check our web site for refurbished PowerBooks  |  & CDRWs on Sale!  |
 Support Low End Mac 
G-Books list info:  
 --> AOL users, remove "mailto:";
Send list messages to:  
To unsubscribe, email:  
For digest mode, email: 
Subscription questions: 
Archive: 

---
The Think Different Store
http://www.ThinkDifferentStore.com
---



Re: Keeping it 'eyes only' was Re: OS X first timer - blank password

2004-12-04 Thread Andrew Kershaw
Read through what the Masters of Paranoia have to say, in the NSA 
guide to securing OS X: 


Bruce,
That's awesome!  Good find!
From the same document:
Open Firmware protection can be violated if the user has physical 
access to the
machine. Open Firmware password protection can be bypassed if the user changes
the physical memory configuration of the machine and then resets the 
PRAM 3 times
(holding down command-option-P-R during boot).
An Open Firmware password will provide
some protection, however, it can be
reset if a user has physical access to the
machine and can change the physical
memory configuration of the machine.
The author suggested setting a "command mode" password (which appears 
to be slightly different than what Apple's OF Password utility does). 
But it's interesting that the password can be bypassed if the user 
pulls a stick of RAM and resets PRAM 3 times thereafter...  Do you 
think that's an Apple-designed back door?

Peace,
Drew
--
Author of ClassicStumbler
email: <[EMAIL PROTECTED]>
web: 
Visit the PowerBook 5300 FAQ!

--
G-Books is sponsored by  and...
Small Dog Electronicshttp://www.smalldog.com  | Refurbished Drives |
-- Check our web site for refurbished PowerBooks  |  & CDRWs on Sale!  |
 Support Low End Mac 
G-Books list info:  
 --> AOL users, remove "mailto:";
Send list messages to:  
To unsubscribe, email:  
For digest mode, email: 
Subscription questions: 
Archive: 

---
The Think Different Store
http://www.ThinkDifferentStore.com
---



Re: OS X first timer - blank password

2004-12-04 Thread Marcin Wichary
Why? It doesn't say anything. If one has physical access to a 
machine, its administrator is usually in big trouble anyway, 
regardless of the operating system.
School, office or whatever; a system CD, 15 minutes...
I can see plenty of security issues!!
Of course there are security issues, but usually for the computer use 
there is a certain amount of trust involved. If that trust is missing, 
system will have to be more secure, but user experience will be 
severely impaired as a result. Fortunately, these are rare instances, 
otherwise your life with computer would be much less pleasant. You 
wouldn't be able to boot off CD (or hard disk any other than internal), 
or access your drive in FireWire mode, Open Firmware password would not 
be optional (and if you forgot it, you'd have to send the computer to 
manufacturer), password-enabled screensaver would not be optional, 
plugging things into USB or putting in CDs would require root password, 
computer would not launch if Kensington lock would not be detected, 
etc. etc.

This type of security is necessary in some instances, for example in 
Internet cafes, or schools. Mission-critical machines in companies are 
usually locked down in heavily isolated datacenters guarded by 
trigger-happy security blokes. However, in real life the above borders 
on paranoia, and common sense assumes that if you have physical access 
to the machine, you should be in control of the machine. Someone has to 
be, after all.

Therefore, an ability to change the password with CD is perfectly 
normal and not in anyway a compromise to security. If you perceive it 
as such, there are means to overcome this (for example FileVault to 
protect your data, or physical removal of CD drive -- cf. 
school-oriented iMac G5). But then you're in minority. After all, we're 
talking consumer computers there. I don't want to have a wasted week if 
my mom forgets the password on her Key Lime iMac. :)

Plus, if someone you don't trust has a physical access to machine, 
there are worse dangers than them having a proper CD. A good magnet or 
even a proper kick can wreak havoc. :)

 Marcin Wichary
e:\> [EMAIL PROTECTED]
w:\> www.aci.com.pl/mwichary >> Attached
w:\> www.aci.com.pl/mwichary/gui >> Graphical User Interface gallery
w:\> www.10yearsofbeingboring.com >> 10 years of Being Boring
w:\> www.usability.pl >> Usability.pl
--
G-Books is sponsored by  and...
Small Dog Electronicshttp://www.smalldog.com  | Refurbished Drives |
-- Check our web site for refurbished PowerBooks  |  & CDRWs on Sale!  |
 Support Low End Mac 
G-Books list info:  
 --> AOL users, remove "mailto:";
Send list messages to:  
To unsubscribe, email:  
For digest mode, email: 
Subscription questions: 
Archive: 

---
The Think Different Store
http://www.ThinkDifferentStore.com
---



Re: OS X first timer - blank password

2004-12-04 Thread Larry le Mac
From: Laurent Daudelin <[EMAIL PROTECTED]>

I agree that we must stay objective but I think that this is misleading.
I agree, I just have a tendancy to play the devil's advocate...  ;o)
Larry
_
Express yourself instantly with MSN Messenger! Download today it's FREE! 
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/

--
G-Books is sponsored by  and...
Small Dog Electronicshttp://www.smalldog.com  | Refurbished Drives |
-- Check our web site for refurbished PowerBooks  |  & CDRWs on Sale!  |
 Support Low End Mac 
G-Books list info:  
 --> AOL users, remove "mailto:";
Send list messages to:  
To unsubscribe, email:  
For digest mode, email: 
Subscription questions: 
Archive: 

---
The Think Different Store
http://www.ThinkDifferentStore.com
---



Re: OS X first timer - blank password

2004-12-04 Thread Laurent Daudelin
on 04/12/04 10:40, Larry le Mac at [EMAIL PROTECTED] wrote:

>> From: Bruce Johnson <[EMAIL PROTECTED]>
> 
>> 3) If you let the bad guy physically sit down at your computer,
>> it's no longer your computer.
> 
> Yes, I can see that one holding up against an argumentative
> Windoze user having been criticised for Windoze's crap security...

Larry,

I agree that we must stay objective but I think that this is misleading.
Arguing that OS X is not very safe because someone can sit at your machine
while it's unprotected is not the same than connecting a Windows PC to the
Internet and have it invaded and took over by hackers within 4 minutes!

-Laurent.
-- 

Laurent Daudelin   AIM/iChat: LaurentDaudelin
Logiciels Nemesys Software   mailto:[EMAIL PROTECTED]

brute force adj.: Describes a primitive programming style, one in which the
programmer relies on the computer's processing power instead of using his or
her own intelligence to simplify the problem, often ignoring problems of
scale and applying naive methods suited to small problems directly to large
ones. The term can also be used in reference to programming style:
brute-force programs are written in a heavyhanded, tedious way, full of
repetition and devoid of any elegance or useful abstraction (see also brute
force and ignorance). 


-- 
G-Books is sponsored by  and...

 Small Dog Electronicshttp://www.smalldog.com  | Refurbished Drives |
 -- Check our web site for refurbished PowerBooks  |  & CDRWs on Sale!  |

  Support Low End Mac 

G-Books list info:  
  --> AOL users, remove "mailto:";
Send list messages to:  
To unsubscribe, email:  
For digest mode, email: 
Subscription questions: 
Archive: 



---
>The Think Different Store
http://www.ThinkDifferentStore.com
---




Re: OS X first timer - blank password

2004-12-04 Thread Laurent Daudelin
on 04/12/04 07:58, Tim Collier at [EMAIL PROTECTED] wrote:

> Sorry for this, but how do you go about setting a firmware password?  I
> even forget how to boot into the firmware area...can anybody describe
> the process for me?
> 
> Tim
> On Dec 3, 2004, at 4:55 PM, Aaron Willems wrote:
> 
>> If you want security, password protect the firmware on your Mac. This
>> will
>> prevent anyone from booting off a CD and changing the password. One
>> word of
>> advice, though. Make sure you don't forget the firmware password. It's
>> 100%
>> percent full proof. If you forget the password, your screwed.

Check on the Apple's web site. You're looking for an application named "Open
Firmware Password", for OS X...

-Laurent.
-- 

Laurent Daudelin   AIM/iChat: LaurentDaudelin
Logiciels Nemesys Software   mailto:[EMAIL PROTECTED]

Flyspeck 3 n.: Standard name for any font that is so tiny as to be
unreadable (by analogy with names like `Helvetica 10' for 10-point
Helvetica). Legal boilerplate is usually printed in Flyspeck 3.


-- 
G-Books is sponsored by  and...

 Small Dog Electronicshttp://www.smalldog.com  | Refurbished Drives |
 -- Check our web site for refurbished PowerBooks  |  & CDRWs on Sale!  |

  Support Low End Mac 

G-Books list info:  
  --> AOL users, remove "mailto:";
Send list messages to:  
To unsubscribe, email:  
For digest mode, email: 
Subscription questions: 
Archive: 



---
>The Think Different Store
http://www.ThinkDifferentStore.com
---




Re: OS X first timer - blank password

2004-12-04 Thread Larry le Mac
From: Bruce Johnson <[EMAIL PROTECTED]>

3) If you let the bad guy physically sit down at your computer,
it's no longer your computer.
Yes, I can see that one holding up against an argumentative
Windoze user having been criticised for Windoze's crap security...

Larry
_
Express yourself instantly with MSN Messenger! Download today it's FREE! 
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/

--
G-Books is sponsored by  and...
Small Dog Electronicshttp://www.smalldog.com  | Refurbished Drives |
-- Check our web site for refurbished PowerBooks  |  & CDRWs on Sale!  |
 Support Low End Mac 
G-Books list info:  
 --> AOL users, remove "mailto:";
Send list messages to:  
To unsubscribe, email:  
For digest mode, email: 
Subscription questions: 
Archive: 

---
The Think Different Store
http://www.ThinkDifferentStore.com
---



Re: OS X first timer - blank password

2004-12-04 Thread Larry le Mac
From: Laurent Daudelin <[EMAIL PROTECTED]>

Why are you saying that about OS X? You don't like it?
It's one of the most secure active operating system these days...
I wouldn't use anything else!!!
It just never hurts to be self critical.
Complacency can do a lot of harm!
Larry
_
FREE pop-up blocking with the new MSN Toolbar - get it now! 
http://toolbar.msn.click-url.com/go/onm00200415ave/direct/01/

--
G-Books is sponsored by  and...
Small Dog Electronicshttp://www.smalldog.com  | Refurbished Drives |
-- Check our web site for refurbished PowerBooks  |  & CDRWs on Sale!  |
 Support Low End Mac 
G-Books list info:  
 --> AOL users, remove "mailto:";
Send list messages to:  
To unsubscribe, email:  
For digest mode, email: 
Subscription questions: 
Archive: 

---
The Think Different Store
http://www.ThinkDifferentStore.com
---



Re: OS X first timer - blank password

2004-12-04 Thread Larry le Mac
From: Marcin Wichary <[EMAIL PROTECTED]>

Boot off of the install disk and you can set/change the password.
Doesn't say much for the security of OS X...
Why? It doesn't say anything. If one has physical access to a machine, its 
administrator is usually in big trouble anyway, regardless of the operating 
system.
School, office or whatever; a system CD, 15 minutes...
I can see plenty of security issues!!
Larry
_
Express yourself instantly with MSN Messenger! Download today it's FREE! 
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/

--
G-Books is sponsored by  and...
Small Dog Electronicshttp://www.smalldog.com  | Refurbished Drives |
-- Check our web site for refurbished PowerBooks  |  & CDRWs on Sale!  |
 Support Low End Mac 
G-Books list info:  
 --> AOL users, remove "mailto:";
Send list messages to:  
To unsubscribe, email:  
For digest mode, email: 
Subscription questions: 
Archive: 

---
The Think Different Store
http://www.ThinkDifferentStore.com
---



Keeping it 'eyes only' was Re: OS X first timer - blank password

2004-12-04 Thread Bruce Johnson
On Saturday, December 4, 2004, at 05:04 AM, Ben Dyer wrote:
On 4 Dec 2004, at 20:54, walter wrote:
Just as a matter of theoretical curiosity: does the Firmware password 
prevent access to a hard drive that is being enslaved via Firewire 
Target mode?

Walter
According to http://docs.info.apple.com/article.html?artnum=106482 , 
the OF protection prevents the computer from being started in target 
disk mode. However, it doesn't prevent someone from pulling the hard 
disk out of the computer and accessing it from another machine.
Uh, *duh*! See rule 3...don't let the bad guy at your computer.
If your stuff is that sensitive, use encrypted disk images to store it. 
(Really paranoid? Encrypted images on a removable disk you put in a 
real vault after using...)

I recommend this rather than FileVault because FileVault is this 'all 
eggs in one basket' kind of thing. One bit flips unexpectedly and 
blammo, your entire user directory is nothing more than digital noise. 
It also makes backups unnecessarily complicated (as you have to back up 
your entire user disk image every time)

Read through what the Masters of Paranoia have to say, in the NSA guide 
to securing OS X: 


They recommend using FileVault, I disagree with that for most civilian 
purposes, for the reasons above, but their section on using Keychain 
access and maintaining secure passphrases is a very worthwhile read.

It's a good booklet to look through and cherry-pick for ideas, though I 
don't think most of us would consider going so far as to get Apple 
Repair certified, so we could tear open the Powerbook and cut out the 
internal microphone and speakers without voiding the warrantee

--
"Wherever you go, there you are." - B. Banzai, Ph.D.
Bruce Johnson

--
G-Books is sponsored by  and...
Small Dog Electronicshttp://www.smalldog.com  | Refurbished Drives |
-- Check our web site for refurbished PowerBooks  |  & CDRWs on Sale!  |
 Support Low End Mac 
G-Books list info:  
 --> AOL users, remove "mailto:";
Send list messages to:  
To unsubscribe, email:  
For digest mode, email: 
Subscription questions: 
Archive: 

---
The Think Different Store
http://www.ThinkDifferentStore.com
---



Re: OS X first timer - blank password

2004-12-04 Thread Tim Collier
Sorry for this, but how do you go about setting a firmware password?  I 
even forget how to boot into the firmware area...can anybody describe 
the process for me?

Tim
On Dec 3, 2004, at 4:55 PM, Aaron Willems wrote:
If you want security, password protect the firmware on your Mac. This 
will
prevent anyone from booting off a CD and changing the password. One 
word of
advice, though. Make sure you don't forget the firmware password. It's 
100%
percent full proof. If you forget the password, your screwed.


Exterminate all rational thought.
--
G-Books is sponsored by  and...
Small Dog Electronicshttp://www.smalldog.com  | Refurbished Drives |
-- Check our web site for refurbished PowerBooks  |  & CDRWs on Sale!  |
 Support Low End Mac 
G-Books list info:  
 --> AOL users, remove "mailto:";
Send list messages to:  
To unsubscribe, email:  
For digest mode, email: 
Subscription questions: 
Archive: 

---
The Think Different Store
http://www.ThinkDifferentStore.com
---



Re: OS X first timer - blank password

2004-12-04 Thread Ben Dyer
On 4 Dec 2004, at 20:54, walter wrote:
Just as a matter of theoretical curiosity: does the Firmware password 
prevent access to a hard drive that is being enslaved via Firewire 
Target mode?

Walter
According to http://docs.info.apple.com/article.html?artnum=106482 , 
the OF protection prevents the computer from being started in target 
disk mode. However, it doesn't prevent someone from pulling the hard 
disk out of the computer and accessing it from another machine.

Cheers,
Ben
--
G-Books is sponsored by  and...
Small Dog Electronicshttp://www.smalldog.com  | Refurbished Drives |
-- Check our web site for refurbished PowerBooks  |  & CDRWs on Sale!  |
 Support Low End Mac 
G-Books list info:  
 --> AOL users, remove "mailto:";
Send list messages to:  
To unsubscribe, email:  
For digest mode, email: 
Subscription questions: 
Archive: 

---
The Think Different Store
http://www.ThinkDifferentStore.com
---



Re: OS X first timer - blank password

2004-12-04 Thread Ben Dyer
On 4 Dec 2004, at 09:31, Bruce Johnson wrote:
You can set a Open Firmware password that will prevent this trick; 
it's just a minor hassle for the user. A good idea if you have 
confidential stuff on your laptop. Don't forget the password though...


If the confidential stuff is that important, you'd be best off 
encrypting it via FileVault or similar. Using an OF password doesn't 
secure your data, it just secures the machine.

Cheers,
Ben
--
G-Books is sponsored by  and...
Small Dog Electronicshttp://www.smalldog.com  | Refurbished Drives |
-- Check our web site for refurbished PowerBooks  |  & CDRWs on Sale!  |
 Support Low End Mac 
G-Books list info:  
 --> AOL users, remove "mailto:";
Send list messages to:  
To unsubscribe, email:  
For digest mode, email: 
Subscription questions: 
Archive: 

---
The Think Different Store
http://www.ThinkDifferentStore.com
---



Re: OS X first timer - blank password

2004-12-04 Thread Laurent Daudelin
on 04/12/04 04:54, walter at [EMAIL PROTECTED] wrote:

> Just as a matter of theoretical curiosity: does the Firmware password
> prevent access to a hard drive that is being enslaved via Firewire
> Target mode?

It doesn't prevent access, it prevents booting from a different disk. So, if
you set your Macintosh to boot from the internal disk and then later change
the startup disk, then when you reboot, you'll be prompted for the firmware
password.

-Laurent.
-- 

Laurent Daudelin   AIM/iChat: LaurentDaudelin
Logiciels Nemesys Software   mailto:[EMAIL PROTECTED]

bozotic /boh-zoh'tik/ or /boh-zo'tik/ adj.: [from the name of a TV clown
even more losing than Ronald McDonald] Resembling or having the quality of a
bozo; that is, clownish, ludicrously wrong, unintentionally humorous.
Compare wonky, demented. Note that the noun `bozo' occurs in slang, but the
mainstream adjectival form would be `bozo-like' or (in New England)
`bozoish'.


-- 
G-Books is sponsored by  and...

 Small Dog Electronicshttp://www.smalldog.com  | Refurbished Drives |
 -- Check our web site for refurbished PowerBooks  |  & CDRWs on Sale!  |

  Support Low End Mac 

G-Books list info:  
  --> AOL users, remove "mailto:";
Send list messages to:  
To unsubscribe, email:  
For digest mode, email: 
Subscription questions: 
Archive: 



---
>The Think Different Store
http://www.ThinkDifferentStore.com
---




Re: OS X first timer - blank password

2004-12-04 Thread walter
Just as a matter of theoretical curiosity: does the Firmware password 
prevent access to a hard drive that is being enslaved via Firewire 
Target mode?

Walter
--
G-Books is sponsored by  and...
Small Dog Electronicshttp://www.smalldog.com  | Refurbished Drives |
-- Check our web site for refurbished PowerBooks  |  & CDRWs on Sale!  |
 Support Low End Mac 
G-Books list info:  
 --> AOL users, remove "mailto:";
Send list messages to:  
To unsubscribe, email:  
For digest mode, email: 
Subscription questions: 
Archive: 

---
The Think Different Store
http://www.ThinkDifferentStore.com
---



Re: OS X first timer - blank password

2004-12-03 Thread Bruce Johnson
On Dec 3, 2004, at 10:27 AM, Larry le Mac wrote:
From: Laurent Daudelin <[EMAIL PROTECTED]>

When booting from the install CD, you can go in the Apple
menu when the installer is loaded and select the option to
change the Admin password, but you won't have to enter
the existing one. Very handy if you should ever forget it...
Or screw with someone else's Mac...
3 Rules of Computer Security:
1) If you let the bad guy run a program on your computer, it's no 
longer your computer.

2) If you let the bad guy convince you to run his program on your 
computer, it's no longer your computer.

3) If you let the bad guy physically sit down at your computer, it's no 
longer your computer.

Note: If you do that to MY mac, there will be serious physical 
consequences. ;-) But then I don't let strangers sit down at my 
computer un-supervised.

You can set a Open Firmware password that will prevent this trick; it's 
just a minor hassle for the user. A good idea if you have confidential 
stuff on your laptop. Don't forget the password though...



--
Bruce Johnson
University of Arizona
College of Pha acy
Information Technology Group
Institutions do not have opinions, merely customs
--
G-Books is sponsored by  and...
Small Dog Electronicshttp://www.smalldog.com  | Refurbished Drives |
-- Check our web site for refurbished PowerBooks  |  & CDRWs on Sale!  |
 Support Low End Mac 
G-Books list info:  
 --> AOL users, remove "mailto:";
Send list messages to:  
To unsubscribe, email:  
For digest mode, email: 
Subscription questions: 
Archive: 

---
The Think Different Store
http://www.ThinkDifferentStore.com
---



Re: OS X first timer - blank password

2004-12-03 Thread Clark Martin
At 1:48 PM -0800 12/3/04, John C. Swanson wrote:
-Original Message-
From: G-Books [mailto:[EMAIL PROTECTED] On Behalf Of Larry le
Mac
Sent: Friday, December 03, 2004 12:25
To: G-Books
Subject: Re: OS X first timer - blank password
From: Tim <[EMAIL PROTECTED]>

Boot off of the install disk and you can set/change the password.
Doesn't say much for the security of OS X...
Overall I think it's better you have that security hole than a bunch 
of people loosing their data because they've forgotten / mis-entered 
their password.  Especially since OS X will boot up and log in a 
user.  That feature means a user may not need to use their password 
often and thus they are more inclined to forget it.

Besides you can always take the disk and mount it on another system 
and access it that way.
--
Clark Martin
Redwood City, CA, USA
Macintosh / Internet Consulting

"I'm a designated driver on the Information Super Highway"
--
G-Books is sponsored by <http://lowendmac.com/> and...
Small Dog Electronicshttp://www.smalldog.com  | Refurbished Drives |
-- Check our web site for refurbished PowerBooks  |  & CDRWs on Sale!  |
 Support Low End Mac <http://lowendmac.com/lists/support.html>
G-Books list info:  <http://lowendmac.com/lists/g-books.html>
 --> AOL users, remove "mailto:";
Send list messages to:  <mailto:[EMAIL PROTECTED]>
To unsubscribe, email:  <mailto:[EMAIL PROTECTED]>
For digest mode, email: <mailto:[EMAIL PROTECTED]>
Subscription questions: <mailto:[EMAIL PROTECTED]>
Archive: <http://www.mail-archive.com/g-books%40mail.maclaunch.com/>

---
The Think Different Store
http://www.ThinkDifferentStore.com
---



Re: OS X first timer - blank password

2004-12-03 Thread Aaron Willems
If you want security, password protect the firmware on your Mac. This will
prevent anyone from booting off a CD and changing the password. One word of
advice, though. Make sure you don't forget the firmware password. It's 100%
percent full proof. If you forget the password, your screwed.

-- 
Aaron Willems
IT Administrator
Lieberman Productions & Philo Television

>> From: Tim <[EMAIL PROTECTED]>
> 
>> Boot off of the install disk and you can set/change the password.
> 
> Doesn't say much for the security of OS X...
> 
> 
> Larry



-- 
G-Books is sponsored by  and...

 Small Dog Electronicshttp://www.smalldog.com  | Refurbished Drives |
 -- Check our web site for refurbished PowerBooks  |  & CDRWs on Sale!  |

  Support Low End Mac 

G-Books list info:  
  --> AOL users, remove "mailto:";
Send list messages to:  
To unsubscribe, email:  
For digest mode, email: 
Subscription questions: 
Archive: 



---
>The Think Different Store
http://www.ThinkDifferentStore.com
---




Re: OS X first timer - blank password

2004-12-03 Thread John C. Swanson
-Original Message-
From: G-Books [mailto:[EMAIL PROTECTED] On Behalf Of Larry le
Mac
Sent: Friday, December 03, 2004 12:25
To: G-Books
Subject: Re: OS X first timer - blank password

>From: Tim <[EMAIL PROTECTED]>

>Boot off of the install disk and you can set/change the password.

Doesn't say much for the security of OS X...


Larry

--

You can do the same thing on a Windows (NT, 2000, XP, 2003) machine with
a number of programs.

--
G-Books is sponsored by <http://lowendmac.com/> and...

 Small Dog Electronicshttp://www.smalldog.com  | Refurbished Drives |
 -- Check our web site for refurbished PowerBooks  |  & CDRWs on Sale!  |

  Support Low End Mac <http://lowendmac.com/lists/support.html>

G-Books list info:  <http://lowendmac.com/lists/g-books.html>
  --> AOL users, remove "mailto:";
Send list messages to:  <mailto:[EMAIL PROTECTED]>
To unsubscribe, email:  <mailto:[EMAIL PROTECTED]>
For digest mode, email: <mailto:[EMAIL PROTECTED]>
Subscription questions: <mailto:[EMAIL PROTECTED]>
Archive: <http://www.mail-archive.com/g-books%40mail.maclaunch.com/>



---
>The Think Different Store
http://www.ThinkDifferentStore.com
---




Re: OS X first timer - blank password

2004-12-03 Thread illovox
If you go in through the disk, you have to know the old password first.  At
least that's the way it is on my password reset programs on my install
disks...

> Message-ID: <[EMAIL PROTECTED]>
> In-Reply-To: <[EMAIL PROTECTED]>
> From: "Larry le Mac" <[EMAIL PROTECTED]>
> Subject: Re: OS X first timer - blank password
> Date: Fri, 03 Dec 2004 18:24:39 +0100
> 
>> From: Tim <[EMAIL PROTECTED]>
> 
>> Boot off of the install disk and you can set/change the password.
> 
> Doesn't say much for the security of OS X...
> 
> 
> Larry

> Message-ID: <[EMAIL PROTECTED]>
> In-Reply-To: <[EMAIL PROTECTED]>
> From: "Larry le Mac" <[EMAIL PROTECTED]>
> Subject: Re: OS X first timer - blank password
> Date: Fri, 03 Dec 2004 18:27:54 +0100
> 
>> From: Laurent Daudelin <[EMAIL PROTECTED]>
> 
>> When booting from the install CD, you can go in the Apple
>> menu when the installer is loaded and select the option to
>> change the Admin password, but you won't have to enter
>> the existing one. Very handy if you should ever forget it...
> 
> Or screw with someone else's Mac...
> 
> 
> Larry


-- 
G-Books is sponsored by <http://lowendmac.com/> and...

 Small Dog Electronicshttp://www.smalldog.com  | Refurbished Drives |
 -- Check our web site for refurbished PowerBooks  |  & CDRWs on Sale!  |

  Support Low End Mac <http://lowendmac.com/lists/support.html>

G-Books list info:  <http://lowendmac.com/lists/g-books.html>
  --> AOL users, remove "mailto:";
Send list messages to:  <mailto:[EMAIL PROTECTED]>
To unsubscribe, email:  <mailto:[EMAIL PROTECTED]>
For digest mode, email: <mailto:[EMAIL PROTECTED]>
Subscription questions: <mailto:[EMAIL PROTECTED]>
Archive: <http://www.mail-archive.com/g-books%40mail.maclaunch.com/>



---
>The Think Different Store
http://www.ThinkDifferentStore.com
---




Re: OS X first timer - blank password

2004-12-03 Thread Laurent Daudelin
On 03/12/04 12:24, "Larry le Mac" <[EMAIL PROTECTED]> wrote:

>> From: Tim <[EMAIL PROTECTED]>
> 
>> Boot off of the install disk and you can set/change the password.
> 
> Doesn't say much for the security of OS X...

That's why you might want to install the Firmware password.

Why are you saying that about OS X? You don't like it? It's one of the most
secure active operating system these days...

-Laurent.
-- 

Laurent Daudelin Developer, Multifamily, ESO, Fannie Mae
mailto:[EMAIL PROTECTED]Washington, DC, USA
 Usual disclaimers apply ***


-- 
G-Books is sponsored by  and...

 Small Dog Electronicshttp://www.smalldog.com  | Refurbished Drives |
 -- Check our web site for refurbished PowerBooks  |  & CDRWs on Sale!  |

  Support Low End Mac 

G-Books list info:  
  --> AOL users, remove "mailto:";
Send list messages to:  
To unsubscribe, email:  
For digest mode, email: 
Subscription questions: 
Archive: 



---
>The Think Different Store
http://www.ThinkDifferentStore.com
---




Re: OS X first timer - blank password

2004-12-03 Thread Marcin Wichary
Boot off of the install disk and you can set/change the password.
Doesn't say much for the security of OS X...
Why? It doesn't say anything. If one has physical access to a machine, 
its administrator is usually in big trouble anyway, regardless of the 
operating system.

 Marcin Wichary
e:\> [EMAIL PROTECTED]
w:\> www.aci.com.pl/mwichary >> Attached
w:\> www.aci.com.pl/mwichary/gui >> Graphical User Interface gallery
w:\> www.10yearsofbeingboring.com >> 10 years of Being Boring
w:\> www.usability.pl >> Usability.pl
--
G-Books is sponsored by  and...
Small Dog Electronicshttp://www.smalldog.com  | Refurbished Drives |
-- Check our web site for refurbished PowerBooks  |  & CDRWs on Sale!  |
 Support Low End Mac 
G-Books list info:  
 --> AOL users, remove "mailto:";
Send list messages to:  
To unsubscribe, email:  
For digest mode, email: 
Subscription questions: 
Archive: 

---
The Think Different Store
http://www.ThinkDifferentStore.com
---



Re: OS X first timer - blank password

2004-12-03 Thread Larry le Mac
From: Laurent Daudelin <[EMAIL PROTECTED]>

When booting from the install CD, you can go in the Apple
menu when the installer is loaded and select the option to
change the Admin password, but you won't have to enter
the existing one. Very handy if you should ever forget it...
Or screw with someone else's Mac...
Larry
_
Express yourself instantly with MSN Messenger! Download today it's FREE! 
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/

--
G-Books is sponsored by  and...
Small Dog Electronicshttp://www.smalldog.com  | Refurbished Drives |
-- Check our web site for refurbished PowerBooks  |  & CDRWs on Sale!  |
 Support Low End Mac 
G-Books list info:  
 --> AOL users, remove "mailto:";
Send list messages to:  
To unsubscribe, email:  
For digest mode, email: 
Subscription questions: 
Archive: 

---
The Think Different Store
http://www.ThinkDifferentStore.com
---



Re: OS X first timer - blank password

2004-12-03 Thread Larry le Mac
From: Tim <[EMAIL PROTECTED]>

Boot off of the install disk and you can set/change the password.
Doesn't say much for the security of OS X...
Larry
_
FREE pop-up blocking with the new MSN Toolbar - get it now! 
http://toolbar.msn.click-url.com/go/onm00200415ave/direct/01/

--
G-Books is sponsored by  and...
Small Dog Electronicshttp://www.smalldog.com  | Refurbished Drives |
-- Check our web site for refurbished PowerBooks  |  & CDRWs on Sale!  |
 Support Low End Mac 
G-Books list info:  
 --> AOL users, remove "mailto:";
Send list messages to:  
To unsubscribe, email:  
For digest mode, email: 
Subscription questions: 
Archive: 

---
The Think Different Store
http://www.ThinkDifferentStore.com
---



Re: OS X first timer - blank password

2004-12-02 Thread Laurent Daudelin
on 02/12/04 18:28, Andrew Kershaw at [EMAIL PROTECTED] wrote:

>> Andrew, Time, et al,
>> 
>> If the password space is left blank when the system is first set up, then
>> the password is in fact a blank space.  All one has to do is hit reurn or
>> the "OK" button and that will move past the authorization process.  This is
>> important also because if you do decide to reset the password using the
>> reset function on the install disks, the reset program will ask for the
>> original password, whereupon you would again enter the blank space ass the
>> password.
>> 
>> Run
> 
> Hi Run,
> 
> Thanks, that's just about what I was thinking.  But won't passwd in
> the terminal do this just as well?  Why would she need to boot from
> the install CD (not that that's a problem)?

Because if the empty space (or the single space) password is not accepted in
Terminal or other apps already installed, that's because they will ask for
it before they let you change it. When booting from the install CD, you can
go in the Apple menu when the installer is loaded and select the option to
change the Admin password, but you won't have to enter the existing one.
Very handy if you should ever forget it...

-Laurent.
-- 

Laurent Daudelin   AIM/iChat: LaurentDaudelin
Logiciels Nemesys Software   mailto:[EMAIL PROTECTED]

BUAG // n.: [abbreviation, from alt.fan.warlord] Big Ugly ASCII Graphic.
Pejorative term for ugly ASCII art, especially as found in sig blocks. For
some reason, mutations of the head of Bart Simpson are particularly common
in the least imaginative sig blocks. See warlording. 


-- 
G-Books is sponsored by  and...

 Small Dog Electronicshttp://www.smalldog.com  | Refurbished Drives |
 -- Check our web site for refurbished PowerBooks  |  & CDRWs on Sale!  |

  Support Low End Mac 

G-Books list info:  
  --> AOL users, remove "mailto:";
Send list messages to:  
To unsubscribe, email:  
For digest mode, email: 
Subscription questions: 
Archive: 



---
>The Think Different Store
http://www.ThinkDifferentStore.com
---




Re: OS X first timer - blank password

2004-12-02 Thread Andrew Kershaw
Andrew, Time, et al,
If the password space is left blank when the system is first set up, then
the password is in fact a blank space.  All one has to do is hit reurn or
the "OK" button and that will move past the authorization process.  This is
important also because if you do decide to reset the password using the
reset function on the install disks, the reset program will ask for the
original password, whereupon you would again enter the blank space ass the
password.
Run
Hi Run,
Thanks, that's just about what I was thinking.  But won't passwd in 
the terminal do this just as well?  Why would she need to boot from 
the install CD (not that that's a problem)?

She's not having any problem launching software installed during the 
original OS X install, so getting Terminal up ought not to be a 
problem.

Peace,
Drew
--
Author of ClassicStumbler
email: <[EMAIL PROTECTED]>
web: 
Visit the PowerBook 5300 FAQ!

--
G-Books is sponsored by  and...
Small Dog Electronicshttp://www.smalldog.com  | Refurbished Drives |
-- Check our web site for refurbished PowerBooks  |  & CDRWs on Sale!  |
 Support Low End Mac 
G-Books list info:  
 --> AOL users, remove "mailto:";
Send list messages to:  
To unsubscribe, email:  
For digest mode, email: 
Subscription questions: 
Archive: 

---
The Think Different Store
http://www.ThinkDifferentStore.com
---



Re: OS X first timer - blank password

2004-12-02 Thread illovox
Andrew, Time, et al,

If the password space is left blank when the system is first set up, then
the password is in fact a blank space.  All one has to do is hit reurn or
the "OK" button and that will move past the authorization process.  This is
important also because if you do decide to reset the password using the
reset function on the install disks, the reset program will ask for the
original password, whereupon you would again enter the blank space ass the
password.

Run
 
> In-Reply-To: <[EMAIL PROTECTED]>
> Message-Id: <[EMAIL PROTECTED]>
> From: Tim <[EMAIL PROTECTED]>
> Subject: Re: OS X first timer - blank password
> Date: Thu, 2 Dec 2004 06:17:18 -0500
> 
> On Dec 2, 2004, at 3:20 AM, Andrew Kershaw wrote:
> 
>> Hi all,
>> 
>> My sister installed Jaguar on her Wallstreet last night, and she
>> managed not to provide a password during the installation.  Now she's
>> trying to install software, and it's asking for the admin password.
>> She says it won't let her leave the password field blank.
>> 
>> Is there any way to reset the password, or will she have to reinstall
>> OS X?
>> 
>> I'm out of my element here, as I'm just getting started w/ OS X
>> myself.  I suggested tying the Users panel in System Preferences, or
>> trying passwd in the terminal, but I don't know if either will allow
>> her to set a new password.
> 
> 
> Boot off of the install disk and you can set/change the password.
> --
> Tim
> [EMAIL PROTECTED]
> 1st/pci-powermacs list nanny
> 
> "The jockey thought he was so clever feeding marijana to
> his steed to enhance it's performance. Well, now he's
> busted, and it's time for him to get off his high horse."


-- 
G-Books is sponsored by <http://lowendmac.com/> and...

 Small Dog Electronicshttp://www.smalldog.com  | Refurbished Drives |
 -- Check our web site for refurbished PowerBooks  |  & CDRWs on Sale!  |

  Support Low End Mac <http://lowendmac.com/lists/support.html>

G-Books list info:  <http://lowendmac.com/lists/g-books.html>
  --> AOL users, remove "mailto:";
Send list messages to:  <mailto:[EMAIL PROTECTED]>
To unsubscribe, email:  <mailto:[EMAIL PROTECTED]>
For digest mode, email: <mailto:[EMAIL PROTECTED]>
Subscription questions: <mailto:[EMAIL PROTECTED]>
Archive: <http://www.mail-archive.com/g-books%40mail.maclaunch.com/>



---
>The Think Different Store
http://www.ThinkDifferentStore.com
---




Re: OS X first timer - blank password

2004-12-02 Thread Tim
On Dec 2, 2004, at 3:20 AM, Andrew Kershaw wrote:
Hi all,
My sister installed Jaguar on her Wallstreet last night, and she 
managed not to provide a password during the installation.  Now she's 
trying to install software, and it's asking for the admin password. 
She says it won't let her leave the password field blank.

Is there any way to reset the password, or will she have to reinstall 
OS X?

I'm out of my element here, as I'm just getting started w/ OS X 
myself.  I suggested tying the Users panel in System Preferences, or 
trying passwd in the terminal, but I don't know if either will allow 
her to set a new password.

Boot off of the install disk and you can set/change the password.
--
Tim
[EMAIL PROTECTED]
1st/pci-powermacs list nanny
"The jockey thought he was so clever feeding marijana to
his steed to enhance it's performance. Well, now he's
busted, and it's time for him to get off his high horse."
--
G-Books is sponsored by  and...
Small Dog Electronicshttp://www.smalldog.com  | Refurbished Drives |
-- Check our web site for refurbished PowerBooks  |  & CDRWs on Sale!  |
 Support Low End Mac 
G-Books list info:  
 --> AOL users, remove "mailto:";
Send list messages to:  
To unsubscribe, email:  
For digest mode, email: 
Subscription questions: 
Archive: 

---
The Think Different Store
http://www.ThinkDifferentStore.com
---



Re: OS X first timer - blank password

2004-12-02 Thread Bob
The National Enquirer reports at 1:20 AM -0700 12/2/04, Andrew Kershaw wrote:

>Hi all,
>
>My sister installed Jaguar on her Wallstreet last night, and she
>managed not to provide a password during the installation.  Now she's
>trying to install software, and it's asking for the admin password.
>She says it won't let her leave the password field blank.
>
>Is there any way to reset the password, or will she have to reinstall OS X?
>
>I'm out of my element here, as I'm just getting started w/ OS X
>myself.  I suggested tying the Users panel in System Preferences, or
>trying passwd in the terminal, but I don't know if either will allow
>her to set a new password.
>
>Ideas?

Drew,
  The administrator password is an administrator user's login 
password.  You should be able to reset the password by booting with 
an install CD, and there is an option to reset your password from the 
Installer menu. Follow the onscreen instructions.

You can also change the password from the CLI in Terminal. But not if 
you can't get there. :-)

If you want to tinker a little bit, try the password Mac User and see 
if it works. IIRC that's the default file sharing password and might 
be the default account password.

For your continued reading pleasure:




HTH,


Bob
-- 
If replying privately, please include my name in the To: address, so 
that my filters won't send your reply to the trash.


-- 
G-Books is sponsored by  and...

 Small Dog Electronicshttp://www.smalldog.com  | Refurbished Drives |
 -- Check our web site for refurbished PowerBooks  |  & CDRWs on Sale!  |

  Support Low End Mac 

G-Books list info:  
  --> AOL users, remove "mailto:";
Send list messages to:  
To unsubscribe, email:  
For digest mode, email: 
Subscription questions: 
Archive: 



---
>The Think Different Store
http://www.ThinkDifferentStore.com
---




OS X first timer - blank password

2004-12-02 Thread Andrew Kershaw
Hi all,
My sister installed Jaguar on her Wallstreet last night, and she 
managed not to provide a password during the installation.  Now she's 
trying to install software, and it's asking for the admin password. 
She says it won't let her leave the password field blank.

Is there any way to reset the password, or will she have to reinstall OS X?
I'm out of my element here, as I'm just getting started w/ OS X 
myself.  I suggested tying the Users panel in System Preferences, or 
trying passwd in the terminal, but I don't know if either will allow 
her to set a new password.

Ideas?
Thanks,
Drew
--
Author of ClassicStumbler
email: <[EMAIL PROTECTED]>
web: 
Visit the PowerBook 5300 FAQ!

--
G-Books is sponsored by  and...
Small Dog Electronicshttp://www.smalldog.com  | Refurbished Drives |
-- Check our web site for refurbished PowerBooks  |  & CDRWs on Sale!  |
 Support Low End Mac 
G-Books list info:  
 --> AOL users, remove "mailto:";
Send list messages to:  
To unsubscribe, email:  
For digest mode, email: 
Subscription questions: 
Archive: 

---
The Think Different Store
http://www.ThinkDifferentStore.com
---