Re: Keeping it 'eyes only' was Re: OS X first timer - blank password

2004-12-07 Thread Bruce Johnson
On Saturday, December 4, 2004, at 10:21 AM, Andrew Kershaw wrote: But it's interesting that the password can be bypassed if the user pulls a stick of RAM and resets PRAM 3 times thereafter... Do you think that's an Apple-designed back door? Yes, absolutely. Otherwise a random stranger,

Re: OS X first timer - blank password

2004-12-04 Thread walter
Just as a matter of theoretical curiosity: does the Firmware password prevent access to a hard drive that is being enslaved via Firewire Target mode? Walter -- G-Books is sponsored by http://lowendmac.com/ and... Small Dog Electronicshttp://www.smalldog.com | Refurbished Drives | -- Check

Re: OS X first timer - blank password

2004-12-04 Thread Laurent Daudelin
on 04/12/04 04:54, walter at [EMAIL PROTECTED] wrote: Just as a matter of theoretical curiosity: does the Firmware password prevent access to a hard drive that is being enslaved via Firewire Target mode? It doesn't prevent access, it prevents booting from a different disk. So, if you set your

Re: OS X first timer - blank password

2004-12-04 Thread Ben Dyer
On 4 Dec 2004, at 09:31, Bruce Johnson wrote: You can set a Open Firmware password that will prevent this trick; it's just a minor hassle for the user. A good idea if you have confidential stuff on your laptop. Don't forget the password though...

Re: OS X first timer - blank password

2004-12-04 Thread Ben Dyer
On 4 Dec 2004, at 20:54, walter wrote: Just as a matter of theoretical curiosity: does the Firmware password prevent access to a hard drive that is being enslaved via Firewire Target mode? Walter According to http://docs.info.apple.com/article.html?artnum=106482 , the OF protection prevents

Re: OS X first timer - blank password

2004-12-04 Thread Tim Collier
Sorry for this, but how do you go about setting a firmware password? I even forget how to boot into the firmware area...can anybody describe the process for me? Tim On Dec 3, 2004, at 4:55 PM, Aaron Willems wrote: If you want security, password protect the firmware on your Mac. This will

Keeping it 'eyes only' was Re: OS X first timer - blank password

2004-12-04 Thread Bruce Johnson
On Saturday, December 4, 2004, at 05:04 AM, Ben Dyer wrote: On 4 Dec 2004, at 20:54, walter wrote: Just as a matter of theoretical curiosity: does the Firmware password prevent access to a hard drive that is being enslaved via Firewire Target mode? Walter According to

Re: OS X first timer - blank password

2004-12-04 Thread Larry le Mac
From: Marcin Wichary [EMAIL PROTECTED] Boot off of the install disk and you can set/change the password. Doesn't say much for the security of OS X... Why? It doesn't say anything. If one has physical access to a machine, its administrator is usually in big trouble anyway, regardless of the

Re: OS X first timer - blank password

2004-12-04 Thread Larry le Mac
From: Laurent Daudelin [EMAIL PROTECTED] Why are you saying that about OS X? You don't like it? It's one of the most secure active operating system these days... I wouldn't use anything else!!! It just never hurts to be self critical. Complacency can do a lot of harm! Larry

Re: OS X first timer - blank password

2004-12-04 Thread Larry le Mac
From: Bruce Johnson [EMAIL PROTECTED] 3) If you let the bad guy physically sit down at your computer, it's no longer your computer. Yes, I can see that one holding up against an argumentative Windoze user having been criticised for Windoze's crap security... Larry

Re: OS X first timer - blank password

2004-12-04 Thread Laurent Daudelin
on 04/12/04 07:58, Tim Collier at [EMAIL PROTECTED] wrote: Sorry for this, but how do you go about setting a firmware password? I even forget how to boot into the firmware area...can anybody describe the process for me? Tim On Dec 3, 2004, at 4:55 PM, Aaron Willems wrote: If you want

Re: OS X first timer - blank password

2004-12-04 Thread Laurent Daudelin
on 04/12/04 10:40, Larry le Mac at [EMAIL PROTECTED] wrote: From: Bruce Johnson [EMAIL PROTECTED] 3) If you let the bad guy physically sit down at your computer, it's no longer your computer. Yes, I can see that one holding up against an argumentative Windoze user having been criticised

Re: OS X first timer - blank password

2004-12-04 Thread Larry le Mac
From: Laurent Daudelin [EMAIL PROTECTED] I agree that we must stay objective but I think that this is misleading. I agree, I just have a tendancy to play the devil's advocate... ;o) Larry _ Express yourself instantly with MSN

Re: OS X first timer - blank password

2004-12-04 Thread Marcin Wichary
Why? It doesn't say anything. If one has physical access to a machine, its administrator is usually in big trouble anyway, regardless of the operating system. School, office or whatever; a system CD, 15 minutes... I can see plenty of security issues!! Of course there are security issues, but

Re: Keeping it 'eyes only' was Re: OS X first timer - blank password

2004-12-04 Thread Andrew Kershaw
Read through what the Masters of Paranoia have to say, in the NSA guide to securing OS X: http://www.nsa.gov/snac/os/applemac/osx_client_final_v.1.pdf Bruce, That's awesome! Good find! From the same document: Open Firmware protection can be violated if the user has physical access to the

Re: Keeping it 'eyes only' was Re: OS X first timer - blank password

2004-12-04 Thread kochkodin
Andrew Kershaw wrote: Open Firmware password protection can be bypassed if the user changes the physical memory configuration of the machine and then resets the PRAM 3 times (holding down command-option-P-R during boot). Funny..Every Apple Tech I have ever spoken to has recommended that if it

Re: OS X first timer - blank password

2004-12-03 Thread Larry le Mac
From: Tim [EMAIL PROTECTED] Boot off of the install disk and you can set/change the password. Doesn't say much for the security of OS X... Larry _ FREE pop-up blocking with the new MSN Toolbar - get it now!

Re: OS X first timer - blank password

2004-12-03 Thread Larry le Mac
From: Laurent Daudelin [EMAIL PROTECTED] When booting from the install CD, you can go in the Apple menu when the installer is loaded and select the option to change the Admin password, but you won't have to enter the existing one. Very handy if you should ever forget it... Or screw with someone

Re: OS X first timer - blank password

2004-12-03 Thread Marcin Wichary
Boot off of the install disk and you can set/change the password. Doesn't say much for the security of OS X... Why? It doesn't say anything. If one has physical access to a machine, its administrator is usually in big trouble anyway, regardless of the operating system. Marcin Wichary

Re: OS X first timer - blank password

2004-12-03 Thread Laurent Daudelin
On 03/12/04 12:24, Larry le Mac [EMAIL PROTECTED] wrote: From: Tim [EMAIL PROTECTED] Boot off of the install disk and you can set/change the password. Doesn't say much for the security of OS X... That's why you might want to install the Firmware password. Why are you saying that

Re: OS X first timer - blank password

2004-12-03 Thread illovox
PROTECTED] Subject: Re: OS X first timer - blank password Date: Fri, 03 Dec 2004 18:27:54 +0100 From: Laurent Daudelin [EMAIL PROTECTED] When booting from the install CD, you can go in the Apple menu when the installer is loaded and select the option to change the Admin password, but you

Re: OS X first timer - blank password

2004-12-03 Thread John C. Swanson
-Original Message- From: G-Books [mailto:[EMAIL PROTECTED] On Behalf Of Larry le Mac Sent: Friday, December 03, 2004 12:25 To: G-Books Subject: Re: OS X first timer - blank password From: Tim [EMAIL PROTECTED] Boot off of the install disk and you can set/change the password. Doesn't

Re: OS X first timer - blank password

2004-12-03 Thread Aaron Willems
If you want security, password protect the firmware on your Mac. This will prevent anyone from booting off a CD and changing the password. One word of advice, though. Make sure you don't forget the firmware password. It's 100% percent full proof. If you forget the password, your screwed. --

Re: OS X first timer - blank password

2004-12-03 Thread Clark Martin
At 1:48 PM -0800 12/3/04, John C. Swanson wrote: -Original Message- From: G-Books [mailto:[EMAIL PROTECTED] On Behalf Of Larry le Mac Sent: Friday, December 03, 2004 12:25 To: G-Books Subject: Re: OS X first timer - blank password From: Tim [EMAIL PROTECTED] Boot off of the install disk

Re: OS X first timer - blank password

2004-12-03 Thread Bruce Johnson
On Dec 3, 2004, at 10:27 AM, Larry le Mac wrote: From: Laurent Daudelin [EMAIL PROTECTED] When booting from the install CD, you can go in the Apple menu when the installer is loaded and select the option to change the Admin password, but you won't have to enter the existing one. Very handy if you

OS X first timer - blank password

2004-12-02 Thread Andrew Kershaw
Hi all, My sister installed Jaguar on her Wallstreet last night, and she managed not to provide a password during the installation. Now she's trying to install software, and it's asking for the admin password. She says it won't let her leave the password field blank. Is there any way to reset

Re: OS X first timer - blank password

2004-12-02 Thread Bob
The National Enquirer reports at 1:20 AM -0700 12/2/04, Andrew Kershaw wrote: Hi all, My sister installed Jaguar on her Wallstreet last night, and she managed not to provide a password during the installation. Now she's trying to install software, and it's asking for the admin password. She

Re: OS X first timer - blank password

2004-12-02 Thread Tim
On Dec 2, 2004, at 3:20 AM, Andrew Kershaw wrote: Hi all, My sister installed Jaguar on her Wallstreet last night, and she managed not to provide a password during the installation. Now she's trying to install software, and it's asking for the admin password. She says it won't let her leave

Re: OS X first timer - blank password

2004-12-02 Thread illovox
the password using the reset function on the install disks, the reset program will ask for the original password, whereupon you would again enter the blank space ass the password. Run In-Reply-To: [EMAIL PROTECTED] Message-Id: [EMAIL PROTECTED] From: Tim [EMAIL PROTECTED] Subject: Re: OS X first

Re: OS X first timer - blank password

2004-12-02 Thread Andrew Kershaw
Andrew, Time, et al, If the password space is left blank when the system is first set up, then the password is in fact a blank space. All one has to do is hit reurn or the OK button and that will move past the authorization process. This is important also because if you do decide to reset the

Re: OS X first timer - blank password

2004-12-02 Thread Laurent Daudelin
on 02/12/04 18:28, Andrew Kershaw at [EMAIL PROTECTED] wrote: Andrew, Time, et al, If the password space is left blank when the system is first set up, then the password is in fact a blank space. All one has to do is hit reurn or the OK button and that will move past the authorization