Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

macOS lock screen: “I just sent my session pass to my whole team”

twitter.com

Post reply on HN
Print view View original

101–110 of 276 posts

Re: macOS lock screen: “I just sent my session pass to my whole team”

#101

Post by miranda_rights »

username223 wrote: post #93
drb91 wrote: post #62

Earlier quoted context omitted.

With treatement like that, I’d prefer to avoid this person and all their content.

Your loss. Jamie Zawinski probably helped write a lot of the software you're using right now, and has observed the internet almost since its birth.

Do you know why he has such an aversion to HN?

Re: macOS lock screen: “I just sent my session pass to my whole team”

#102

Post by TomK32 »

jmull wrote: post #35
geerlingguy wrote: post #26

Earlier quoted context omitted.

Because of the short delay between waking the Mac and the display lighting up, I always either use spacebar or command key, or click the trackpad/mouse a couple times to wake. Return is a dangerous key!

I hit the shift key

I'm a ctrl freak :D

Re: macOS lock screen: “I just sent my session pass to my whole team”

#103

Post by noahdesu »

Last week I was resizing a window in High Sierra, and I noticed that the Chrome app in the background was also scrolling. That was completely unexpected. It's long been the case that the window doesn't need to be on top for this behavior, but in this case it wasn't just a focus issue, it was that I was in resize mode. Completely jarring when it happened, but seems related.

Re: macOS lock screen: “I just sent my session pass to my whole team”

#104

Post by Fishkins »

eamann wrote: post #44

Apple has a bug bounty program where they'll legitimately pay you to report bugs directly to them. What's with everyone reporting them to Twitter instead and forgoing the extra cash?

People post on twitter because it actually gets a quick response. According to Lemi Orhan Ergin, the root password bug had been reported to directly to Apple five days before his tweet, but there was no response/fix. Then he tweeted about it, and it was fixed the next day.

https://medium.com/@lemiorhan/the-story-behind-anyone-can-lo...

Re: macOS lock screen: “I just sent my session pass to my whole team”

#105

Post by username223 »

miranda_rights wrote: post #101
username223 wrote: post #93

Earlier quoted context omitted.

Your loss. Jamie Zawinski probably helped write a lot of the software you're using right now, and has observed the internet almost since its birth.

Do you know why he has such an aversion to HN?

No -- I don't know him personally -- but I would guess that he thinks it's a pile of amoral greed-heads and ignorant children.

Re: macOS lock screen: “I just sent my session pass to my whole team”

#106

Post by brazzledazzle »

zamalek wrote: post #70
monochromatic wrote: post #69

Earlier quoted context omitted.

Especially here, where it’s (probably?) not remotely exploitable.

> probably Show and focus a window when the user locks their machine.

Yeah. You can do keystroke logging without root but typing into password fields can't be intercepted. This would be a nice complement to that capability.

Re: macOS lock screen: “I just sent my session pass to my whole team”

#107

Post by Gloire_a_Satan »

teekert wrote: post #65
breakingcups wrote: post #8

Earlier quoted context omitted.

I knew I shouldn't have picked 'rm -rf /' as a password

Haha, tried that a couple of months back before wanting to do a reinstall. The system stopped me with some warning :) I think it was Arch but could have been Ubuntu or Solus.

There's a way to still do the rm -rf / bypassing the warning but you shouldn't do that.

Ever since systemd was a thing, that command has stopped being 'safe'. It no longers solely affect the filesystem. It can wipe your EFI variables and make your comnputer unable to boot at all, even unable to boot installers to reinstall linux.

https://github.com/systemd/systemd/issues/2402

Don't think of the file system as just the file system. If you keep thinking of / as only meaning 'whatever's in that hard drive' you will not like what you may encounter.

Re: macOS lock screen: “I just sent my session pass to my whole team”

#108

Post by daveFNbuck »

gonational wrote: post #63

With no disrespect to the developers at Apple, et al, each one of these problems that goes viral before reaching “proper” channels is a well-deserved slap in the face of these behemoth organizations. Perhaps, if the entire tech community regards Apple as a joke, they will start paying attention. “Responsible disclosure” is great stuff for creating a culture of free outsourcing of tech companies’ most imporant feature…

Responsible disclosure is about preventing the bug from being exploited before it can be fixed. Knowing about this bug doesn't help me compromise someone else, but it does help me avoid getting compromised.

Re: macOS lock screen: “I just sent my session pass to my whole team”

#109

Post by daveFNbuck »

zamalek wrote: post #70
monochromatic wrote: post #69

Earlier quoted context omitted.

Especially here, where it’s (probably?) not remotely exploitable.

> probably Show and focus a window when the user locks their machine.

How do you do that?

Re: macOS lock screen: “I just sent my session pass to my whole team”

#110

Post by brazzledazzle »

tachion wrote: post #13

Oh, wow - I've reported this problem along with na example exploit to Apple about 6-7 years ago. Never got any recognition for it, but It was fixed some time after that. It's quite sad to see old bugs getting new lives like that. For those interested, the sample exploitation that I've discovered was connecting any iPod/iPhone device to a OSX laptop while screen was locked was taking the focus away from login prompt '…

I've seen enough regressions with enterprise stuff that I've wondered what their testing looks like. Of course they've always neglected the enterprise so I gave them the benefit of the doubt about the OS as a whole but now I'm starting to wonder.
Post reply on HN