Submit Hint Search The Forums LinksStatsPollsHeadlinesRSS
14,000 hints and counting!


Click here to return to the 'Enable automatic login with automatic screen lock' hint
The following comments are owned by whoever posted them. This site is not responsible for what they say.
Enable automatic login with automatic screen lock
Authored by: frgough on Nov 07, '06 08:48:48AM

First rule in security: If someone has physical access to the machine, it isn't secure.

For example, even if the screen was already locked, someone can just come up and pull the power cord and hold command-S when restarting the machine. All security is bypassed.

If you have an open firmware password, the person can simply open the case, pull a RAM stick and restart the machine.

This method is pretty good for locking down a machine in a trusted environment; i.e. one where you don't expect people to deliberately work at compromising your machine, but might mess you up without intending to do so or see something they shouldn't (like a payroll spreadsheet) if your machine wasn't locked at all.



[ Reply to This | # ]
Enable automatic login with automatic screen lock
Authored by: cougar718 on Nov 07, '06 09:27:01AM

FYI in case anyone was wondering...

Changing RAM configuration on a machine protected by the Open-Firmware Password disables the password.

---
Rick alias cougar



[ Reply to This | # ]
Enable automatic login with automatic screen lock
Authored by: boxcarl on Nov 07, '06 12:37:50PM

If you use FileVault though, you do have some protection, since the attacker will have to find a way to decrypt the files, which is really hard. The downside is that FileVault is a little buggy? or at least seems that way in the reports I've read.



[ Reply to This | # ]