Submit Hint Search The Forums LinksStatsPollsHeadlinesRSS
14,000 hints and counting!

10.4: Possible security issue with wake from sleep System 10.4
I like my PowerBook to be secure, so in the Security System Preferences panel, I require a password when coming back from sleep. I noticed a little problem though: assume I wake the machine, and after entering my password (but before the desktop is loaded), I close the lid, and the PowerBook goes to sleep. When I wake up the PowerBook the next time, it doesn't ask for a password, but shows my secrets to the world.

So don't close the lid and believe you're safe, unless you are very sure you are fully logged in. Especially when you move around a lot, and are used to just closing the notebook and stuffing it in you bag.

[robg adds: This hint was marked 10.4 only; I couldn't replicate it on 10.5, at least on my desktop machine.]
    •    
  • Currently 1.92 / 5
  You rated: 2 / 5 (24 votes cast)
 
[9,858 views]  

10.4: Possible security issue with wake from sleep | 7 comments | Create New Account
Click here to return to the '10.4: Possible security issue with wake from sleep' hint
The following comments are owned by whoever posted them. This site is not responsible for what they say.
10.4: Possible security issue with wake from sleep
Authored by: Kevin_ on Jan 23, '08 08:01:00AM

Would be pretty hard to replicate on a desktop though, as there ain't a lid to close...

I'd try it, but my MBP runs leopard :'(



[ Reply to This | # ]
10.4: Possible security issue with wake from sleep
Authored by: morespace54 on Jan 23, '08 10:46:06AM

FYI
I have the same problem on my iBook G4 with 10.5 (and had it also with 10.4).

Sometimes, I also have a different problem, the opposite actually. I wake up my iBook from sleep, then the system ask me for my password, log me in then ask for my password again, just before I get to the Desktop. I don't remember if I had this problem with 10.4 'tho...

In any case, it's on and off...



[ Reply to This | # ]
10.4: Possible security issue with wake from sleep
Authored by: ashevin on Jan 23, '08 08:51:20PM

I cannot replicate this on my MB, running 10.5. I do see the desktop appear before I am able to close the lid. I suspect that I am not using the machine heavily enough to cause a long wake-up cycle.



[ Reply to This | # ]
10.4: Possible security issue with wake from sleep
Authored by: eisbaer on Jan 24, '08 02:09:06AM

started to have this behaviour after one of these system upgrades from 10.4.x to 10.4.y. Can't tell anymore if it was PPC only or Intel as well.
It sometimes also wasn't possible to lock the screen with a password secured screen saver. It occurred with all users (including root or newly created testusers), after moving or deleting whatever preference file there was and even after a PRAM-reset.
It could sometimes be fixed with a reboot. Very often the problem stayed even then. Always working was to reboot, to login, to check if the screensaver asks for your credentials or not and if not to logout/login.

For me eventually working was deleting these files in /var/vm/app_profile which seems to be some caching mechanism to speed up the boot process.
If the problem occurred, booting into single user mode, letting the applejack script (see applejack.sf.net; maybe any other maintenance tool will do) doing its job, rebooting the machine and everything was fine again.

no experience with 10.5.x but I think this directory doesn't exist any more (?)



[ Reply to This | # ]
10.4: Possible security issue with wake from sleep
Authored by: Fairly on Jan 24, '08 05:45:14AM

It actually gets worse. An ambitious spy can delete the preference file in "~/Library/Preferences/ByHost" that triggers the password prompt (com.apple.screensaver.*.plist) so a computer left later unguarded can be accessed. This is a known design flaw and was supposed to be remedied in 10.5 but unfortunately it wasn't.



[ Reply to This | # ]
10.4: Possible security issue with wake from sleep
Authored by: qubex on Jan 25, '08 02:26:54PM

Password protection upon resume-from-sleep and to leave the screensaver has always been less than useless on 10.x.

10.4 has a persistent bug whereby PowerMac Quad G5s never ask for passwords. I've been grumbling to Apple about it since November 2005 and their response is basically "we know".

So don't be surprised, and don't rely on it. It's disgustingly unreliable.

---
Place me in the company of those who seek Truth, but deliver me from those who believe to have found it.



[ Reply to This | # ]
10.4: Possible security issue with wake from sleep
Authored by: marcodome on Jul 03, '10 02:49:52PM

Similar problems (with 10.5 or 10.6): I inserted the password, than the computer suspended itself because of low batteries: after plugging in, when I exit from suspended mode, I logged in without inserting password.



[ Reply to This | # ]