Live data from Hacker News

If macOS High Sierra shows your password instead of the password hint

support.apple.com

161–170 of 372 posts

Re: If macOS High Sierra shows your password instead of the password hint

#161
post #122

How did Disk Utility.app go from being one of the great built-in OS X utilities to the embarrassing amateurish shit show that it is today? Perhaps the same people responsible for the file system engineering are also responsible for developing this user-facing application. They might excel at low level system engineering, but they are utterly unqualified to develop a high level GUI application. Spend 5 minutes with th…

There have been a few cases like this. Presumably the original was created/maintained by just one person, they move on, and then when the next person comes along they decide it's easier to re-write than modify the old code. But they don't have sufficient time and the new version is inferior to the old. Bear in mind the old version did need to be updated (new CoreStorage features, has to handle Fusion drives, now APFS…

1. dont have the same depth of dev talent they used to 2. mgmt that isnt as sensitive-to and focussed-on quality.

(this is 75% speculation on my part and 25% confirmed by conversations with 2 ex-apple engineers.)

Re: If macOS High Sierra shows your password instead of the password hint

#162

Earlier quoted context omitted.

>This is a blatant lie. No, it's not. Try recovering your iCloud password from the web right now. I couldn't believe it either. https://support.apple.com/en-us/HT204921 "For your security, recovery includes a waiting period that may be several days or longer depending on the information you can provide to verify your identity. Apple Support cannot help you shorten this time. "

If you want to reset your password, it's pretty much standard operating procedure: https://support.apple.com/en-us/ht201487 Not sure where you got that quote from - it's not in the link you pasted.

https://support.apple.com/en-us/HT204921

Try this link.

> Account recovery is an automated process designed to get you back into your Apple ID account* as quickly as possible and deny access to unauthorized users. For your security, recovery might take several days or longer, depending on the verification information that you can provide.

Re: If macOS High Sierra shows your password instead of the password hint

#163

Earlier quoted context omitted.

Or maybe: “I hope they improve and nobody loses their job”

Without knowing the circumstances of how the bug was introduced, and the testing infrastructure, I'm torn. On the one hand, I could be convinced that some believable scenarios exist where test might have missed this through something other than incompetence and sloppiness. OTOH, I'm having a hard time imagining what that "believable" scenario might look like. You hand me Disk Utility to test, and I'm going to do some…

I think that bug could easily slip through once, even with a test script. Let’s say the script says

  - enter P as password
  - enter H as hint
  - click “OK”
  - unmount the disk
  - mount it again
  - check that the dialog shows the hint H
  - enter P as the password
  ...
Now, if P isn’t obviously a password and H isn’t obviously a hint (let’s say P is ‘foo’, and H is ‘bar’), it takes only one slip of the mind to turn that “check that the dialog shows the hint H” into “check that the dialog shows the string you just entered as hint”, and from there, it’s only a tiny further slip to “yes, that’s a string I just entered”.

To me, it seems at least as likely that that gets past a tester once as it is that a programmer writes that bug.

It still should be highly unlikely to get throug multiple rounds of testing by multiple testers, though.

A better test description would use a more password-like value for P (say ‘tqbfjoald’) and a more hint-like value for H (‘quick and brown’), decreasing that risk.

Re: If macOS High Sierra shows your password instead of the password hint

#165
post #95
post #67

Earlier quoted context omitted.

I think encryption uses a generated key to encrypt most of the disk, and stores that key encrypted with the user password on the disk. That makes changing the password fast; they only need to re-encrypt the encrypted key with the new password, and write it out. Problem is that an attacker who knows the old password may already have decrypted the generated key, so they can decrypt the encrypted data from the raw data,…

Couldn't you just turn off FileVault (decrypts the drive), let that finish, then turn it back on again?

I guess that doesn’t remove the master key. Maybe, it also is used as the ID that uniquely identifies the disk?

Re: If macOS High Sierra shows your password instead of the password hint

#166

The lack of attention to detail by Apple recently e.g. code reviews, in house testing is clearly too low. I have seen too many software failures recently from this company. Like photos freezing on my new iMac (before High Sierra), numerous issues with iOS (I remember the podcasts app wasting all my cellular allowance because it ignored WiFi only) and other nuances, inconsistencies and defects. Only in iOS 11 have the…

I have a Dell Precision laptop running Linux at home and a MacBook Pro from work. On a weekly basis, the Mac won't wake from sleep and requires a hard reboot. The Time Machine backups get corrupted at least every other month and require a full backup from scratch. Sometimes the audio just quits working when I wake from sleep. The App Store is some horribly wrapped, unresponsive web app. Disk Utility is useless. Etc,…

After my previous MacBooks became buggier and less responsive after updating, I decided to abstain from updating altogether. I'm still on El Capitan, and while there are some bugs and rather baffling programs (z.B. the updated Disk Utility), they are far and few between compared to the High Sierra experience on my other computers. Perhaps you could consider downgrading?

Re: If macOS High Sierra shows your password instead of the password hint

#167
post #71

Apple is really going downhill, in every field. I have a MacBook Pro, and the keys no longer work reliably. I also barely get 2 hours of battery life. High Sierra keeps restarting by itself. They removed the jack, and all ports from laptops. They placed the charger for their wireless mouse under the mouse so you can't use it while charging, and the list goes on and on--particularly with software. It's just not premiu…

> They removed the jack, and all ports from laptops. What are you on about? Audio jack is there. > They placed the charger for their wireless mouse under the mouse so you can't use it while charging And? Mouse lasts MONTHS on a single charge. It notifies you 12 hours ahead that it needs charging. A 5 min charge can last you an hour. I think this is a lot better than having a hole on the side of your mouse at all time…

I presume we’re talking about the Magic Mouuse 2 here. You must not use your mouse very much. I get about 3 weeks on a charge.

What baffles me about the MM 2, why didn’t they put a notch at the top so you could plug the Lightning cable in and use it while it is charging?

Re: If macOS High Sierra shows your password instead of the password hint

#168

Earlier quoted context omitted.

Their software quality really has become atrocious. Just try recovering your iCloud password from the web. It takes (literally) weeks to do so.

This is a blatant lie.

I wonder if bugs impacted 100% of users, would people still argue over minutia.

Re: If macOS High Sierra shows your password instead of the password hint

#169
post #78
post #56

Earlier quoted context omitted.

The Moto devices feel like a well kept secret in the Android community. They are all priced well and the quality is generally quite good. Its too bad that the cameras tend to be subpar, though.

I’ve been abandoned on updates by Motorola or whoever it is owned by on the current whim within a year of buying my G2 and G3 handsets. I don’t feel I can trust them or Google with my cash. Not only that Google makes it difficult to consider your privacy because at every turn there’s a trap. And god forbid one goes wrong because the repair and aftercare service at least in the U.K. is dire. I was told a handset was w…

G2 seems to still get updates if you install LineageOS. My Note2 works beautifully. It is a pity that you have to install it yourself though. On Apple you get updates for as little as 2 years (5s). Neither is good. I would so much prefer buying a phone with vanilla Android and open drivers. But I can still buy an Android phone that I can change batteries and SD-card. One that is not planned to be obsolete.

Re: If macOS High Sierra shows your password instead of the password hint

#170
post #91

Earlier quoted context omitted.

The mouse thing really irks me. The moment the mouse needs charging is the moment is stop working. So why am I expected to then not use the product while it charges? A product that used to have a wire connected to it and is sitting right next to the computer ? How is having a hole in the bottom at better than having a hole on the side?

I don't think it's about the hole. Someone decided: - users would have a better experience if the mouse was wireless - if left to their own devices, users will tend to leave the mouse plugged in and use it as a wired mouse so they solved that contradiction by taking away the option of missing out on wirelessness.

pfft
Post reply on HN