macOS lock screen: “I just sent my session pass to my whole team”
1–10 of 276 posts
Re: macOS lock screen: “I just sent my session pass to my whole team”
#2Even more fun if the focus happens to be on a terminal window...
Re: macOS lock screen: “I just sent my session pass to my whole team”
#3How about people stop releasing this sh*t on twitter?
Re: macOS lock screen: “I just sent my session pass to my whole team”
#4Could not reproduce that. For me its impossible to not have the password field focused. Hm?
Re: macOS lock screen: “I just sent my session pass to my whole team”
#5Christ are these people just looking for attention or what? Why don't they take a second to follow some kind of responsible disclosure policy?
Plus you can get bug bounty money probably if you do this the correct way.
Re: macOS lock screen: “I just sent my session pass to my whole team”
#6I did something similar too - I was typing in the password while the Mac was being unlocked by the watch using that unlock-with-the-watch feature.
I was used to hammering return a few times to wake the machine up, then typing in the password, then hitting return again.
The few times I hammered return woke the machine, the watch unlocked the mac and the password plus the return key went into the app that had focus which for me also was Slack.
Is it possible that this user had the same thing happen to them? When I disable the watch unlocking, I can't make the password go anywhere but into the login screen (10.13.1 here with last weeks security update applied)
Re: macOS lock screen: “I just sent my session pass to my whole team”
#7How about people stop releasing this sh*t on twitter?
Most people not in tech or infosec have never heard of and are totally uneducated about the concept of responsible disclosure. Maybe it needs to be added to high school computer class?
Re: macOS lock screen: “I just sent my session pass to my whole team”
#8Even more fun if the focus happens to be on a terminal window...
I knew I shouldn't have picked 'rm -rf /' as a password
Re: macOS lock screen: “I just sent my session pass to my whole team”
#9Left Slack open with focus, allowed MBP to sleep, woke with space bar, login field had focus, tried with closing lid and opening while Slack was open and focused, again password field functioned as it should, unable to reproduce, macOS 10.13.2
Re: macOS lock screen: “I just sent my session pass to my whole team”
#10I worked at an open source shop where almost everyone ran Linux and used IRC for chat. For a while I made the mistake of having the screen black time lower than the screensaver timeout, so I'd unlock my screen and see my password go out in IRC. I ended up changing my password to something that looked like a shell command.