Live data from Hacker News

macOS lock screen: “I just sent my session pass to my whole team”

twitter.com

31–40 of 276 posts

Re: macOS lock screen: “I just sent my session pass to my whole team”

#31
Not to pile on, but my MBP (with "TouchBar" which will assuredly not exist in another year) is always in clamshell mode and connected to two external LG 4K displays. Whether, on which screen(s), or in what state the Mac wakes each morning is completely random. Sometimes it doesn't wake at all. Sometimes I have artifacts on one screen and a desktop on another screen. The sleep/wake sequence is a complete mess, and it doesn't surprise me that the focus might sometimes be on apps running in the user session behind the lock screen.

Re: macOS lock screen: “I just sent my session pass to my whole team”

#32
post #31

Not to pile on, but my MBP (with "TouchBar" which will assuredly not exist in another year) is always in clamshell mode and connected to two external LG 4K displays. Whether, on which screen(s), or in what state the Mac wakes each morning is completely random. Sometimes it doesn't wake at all. Sometimes I have artifacts on one screen and a desktop on another screen. The sleep/wake sequence is a complete mess, and it…

I have a similar problem running my touchbar Macbook Pro in clamshell mode via a CalDigit USB-C dock. All sorts of issues with it discovering USB devices when you plug the hub in too.

Re: macOS lock screen: “I just sent my session pass to my whole team”

#33
post #31

Not to pile on, but my MBP (with "TouchBar" which will assuredly not exist in another year) is always in clamshell mode and connected to two external LG 4K displays. Whether, on which screen(s), or in what state the Mac wakes each morning is completely random. Sometimes it doesn't wake at all. Sometimes I have artifacts on one screen and a desktop on another screen. The sleep/wake sequence is a complete mess, and it…

I've seen that issue with LG displays at work, but when I get home and plug in the MBP to the setup there, (I have dual "Dell Ultra HD 4K Monitor P2415Q 24" displays on my 2017 15" Macbook Pro) there's never a problem.

I'm inclined to believe it's the LG displays. Their washer/dryer appliances have some issues too, so I've learned to stay away from them.

Re: macOS lock screen: “I just sent my session pass to my whole team”

#34
post #30

Lock screens are harder than they first appear: www.jwz.org/xscreensaver/toolkits.html (Which, you'll note, mentions this exact failure case in the "Transfer Grabs?" section.) There's some X-specific stuff in there, but there's a lot of general issues in there, and with just a bit of imagination most or all of the X-specific issues can be seen as general issues as well.

N.B. jwz does not like being linked to from HN. Open the link in a new tab.

Re: macOS lock screen: “I just sent my session pass to my whole team”

#35
post #6

I did something similar too - I was typing in the password while the Mac was being unlocked by the watch using that unlock-with-the-watch feature. I was used to hammering return a few times to wake the machine up, then typing in the password, then hitting return again. The few times I hammered return woke the machine, the watch unlocked the mac and the password plus the return key went into the app that had focus whi…

Because of the short delay between waking the Mac and the display lighting up, I always either use spacebar or command key, or click the trackpad/mouse a couple times to wake. Return is a dangerous key!

I hit the shift key

Re: macOS lock screen: “I just sent my session pass to my whole team”

#38
post #6

I did something similar too - I was typing in the password while the Mac was being unlocked by the watch using that unlock-with-the-watch feature. I was used to hammering return a few times to wake the machine up, then typing in the password, then hitting return again. The few times I hammered return woke the machine, the watch unlocked the mac and the password plus the return key went into the app that had focus whi…

Original Poster replied to my tweet where I asked him if he has an Apple Watch: >Hey Tonny. No I don't have an Apple Watch so it's not related. I did connect an external screen before opening the MBP though, so maybe it's related to that? Note that I can't reproduce it, happened only once so it must be a shady bug.

See https://twitter.com/BenoitLetondor/status/939164367962148864

Re: macOS lock screen: “I just sent my session pass to my whole team”

#40
post #13

Oh, wow - I've reported this problem along with na example exploit to Apple about 6-7 years ago. Never got any recognition for it, but It was fixed some time after that. It's quite sad to see old bugs getting new lives like that. For those interested, the sample exploitation that I've discovered was connecting any iPod/iPhone device to a OSX laptop while screen was locked was taking the focus away from login prompt '…

I remember seeing something like this with an some version of 10.12 as well. Stupidly it didn't occur to me that it was a security issue.
Post reply on HN