61–70 of 134 posts
This sounds amazing, and Id love if Apple allowed touchid for regular account-password prompts in macOS 10.13 (or a Sierra point update but let's be realistic) If they integrated this down to the built in sudo/su that would be even more amazing, but I imagine that's much less likely.
You two are both doing the "ATM machine" thing. (PAM = Pluggable Authentication Module) "Written as a PAM" sure feels wrong on the lips, though.
You two are both doing the "ATM machine" thing. (PAM = Pluggable Authentication Module) "Written as a PAM" sure feels wrong on the lips, though.
You then write a module for the PAM library, so it makes the most sense to call it a "PAM Module", even if there is some redundancy in the acronym.
You two are both doing the "ATM machine" thing. (PAM = Pluggable Authentication Module) "Written as a PAM" sure feels wrong on the lips, though.
Except PAM stands for "Pluggable Authentication Modules" (as in "PAM Library") - plural. You then write a module for the PAM library, so it makes the most sense to call it a "PAM Module", even if there is some redundancy in the acronym.
This sounds amazing, and Id love if Apple allowed touchid for regular account-password prompts in macOS 10.13 (or a Sierra point update but let's be realistic) If they integrated this down to the built in sudo/su that would be even more amazing, but I imagine that's much less likely.
It is already the case. In the keynote, they demoed Fast User Switch with a touch of finger. If multiple people share a single computer, switching to the right user account is a touch away.
I was talking about "X needs your password to Y", e.g. unlocking sys preferences panels, keychain stuff, etc.
Earlier quoted context omitted.
It's a "something you are" authentication factor, since it is presumed that the cost of faking a fingerprint is too high to be worth it in those cases.
I guess I like the trade-offs of something-you-have/something-you-know even if the cost of faking them is actually lower. I am probably in a minority.
That seems like the best of both worlds there.
Earlier quoted context omitted.
Isolate your concerns and risks. There's no reason to drop into an interactive root shell for a single command, and your chances of forgetting your current privilege level and running the wrong thing are not insignificant.
What special "wrong thing" can root do? There might os level files that only root can edit or delete. I don't care about those. I can reinstall the os anytime if I should ever mess it up. All the value is in my data.
You two are both doing the "ATM machine" thing. (PAM = Pluggable Authentication Module) "Written as a PAM" sure feels wrong on the lips, though.
The original PAM RFC defines PAM as Pluggable Authentication Modules (plural – it’s the name of the framework and not one of its components), so it’s fine and more natural to say “PAM module”.
Earlier quoted context omitted.
Lift the thumbprint off of the TouchID sensor itself? That is, assuming the premise of the grandparent comment is valid and fingerprints lifted off of the keyboard would be enough.
Slide, rather than raise, your thumb off the sensor.
Earlier quoted context omitted.
TouchID sensor isn't that easy to fool with replicated fingerprints. If you are afraid that some one will cut off your finger to unlock your computer don't use the touchID, that said if some one is willing to do that to unlock it i wouldn't want to imagine what they'll do to you to get the password. ;)
You don't really need to cut their finger off. Just get them drunk enough to pass out.