Live data from Hacker News

macOS lock screen: “I just sent my session pass to my whole team”

twitter.com

151–160 of 276 posts

Re: macOS lock screen: “I just sent my session pass to my whole team”

#152

So, Apple has the most available cash resource of any company out there (or at least close to). Yet, bugs galore, and strange product decisions. The obvious conclusion is that their management is failing to staff accordingly to the work that needs to be done. This could be because they are not aware that work needs to be done, which means engineers are not telling them, or that the management is not succeeding in hir…

I'm guessing that it's going to be pretty difficult to hire an engineer who is:

- Very good

- Wants to live near Palo Alto

- Is able to live in the US

- Wants to be subjected to Apple's privacy rules

- Wants to work on fixing bugs instead of making new features

In the software engineering game, money only goes so far.

Re: macOS lock screen: “I just sent my session pass to my whole team”

#154

Earlier quoted context omitted.

We have many staff with MBP + dual external displays and it's always been the least reliable aspect of the platform. From reading between the lines in the unusually arcane history of support docs on the topic, I've surmised their stance can be summed up as "it might work!" Which of course runs counter to the Apple It Just Works ideal, so they can never come out and admit as such. They've gone to great lengths to sque…

For what it's worth (anecdote incoming) I use a touchbar MBP with a Dell UP2414Q, which is driven using multi-stream transport. Effectively its panel is presented to the system as two separate displayport streams running daisy-chained over a single port. Once I found the right cable, everything worked fine. (The first cable was advertised with DP1.2 and MST support, but it would only operate in the legacy mode that d…

Do you have a link for this cable? I am always interested in foisting esoteric firmware and poorly implemented protocol bugs upon myself.

Re: macOS lock screen: “I just sent my session pass to my whole team”

#155
post #31

Not to pile on, but my MBP (with "TouchBar" which will assuredly not exist in another year) is always in clamshell mode and connected to two external LG 4K displays. Whether, on which screen(s), or in what state the Mac wakes each morning is completely random. Sometimes it doesn't wake at all. Sometimes I have artifacts on one screen and a desktop on another screen. The sleep/wake sequence is a complete mess, and it…

I have horrible sleep wake and external monitor problems on both my new macbook pros

Re: macOS lock screen: “I just sent my session pass to my whole team”

#156
post #136

FWIW this is a known security bug at Apple. I filed a bug about similar behavior where you can see the desktop briefly without logging in. Apple marked it as a duplicate. https://imgur.com/YxXtU2y Here are the steps to reproduce: - Start Mac - Login - Turn on Screen Lock: System Preferences > Security > General > Check "Require Password" and Select 5 Seconds. - Turn on Hot Corner Sleep Display: System Preferences > M…

The desktop flash happens regularly to me when simply attaching an external monitor to my closed locked machine.

Re: macOS lock screen: “I just sent my session pass to my whole team”

#157

With no disrespect to the developers at Apple, et al, each one of these problems that goes viral before reaching “proper” channels is a well-deserved slap in the face of these behemoth organizations. Perhaps, if the entire tech community regards Apple as a joke, they will start paying attention. “Responsible disclosure” is great stuff for creating a culture of free outsourcing of tech companies’ most imporant feature…

Responsible disclosure is about preventing the bug from being exploited before it can be fixed. Knowing about this bug doesn't help me compromise someone else, but it does help me avoid getting compromised.

> but it does help me avoid getting compromised

Only by casual hackers. The pros will probably have been exploiting the flaw for weeks or months against gainful targets.

If there is a reasonable end-user workaround against the vulnerability then I'd argue it's more responsible to publish early and widely than to wait for the vendor.

It becomes greyer if there is no workaround. I'm not sure what I'd support in that case.

Re: macOS lock screen: “I just sent my session pass to my whole team”

#159
post #75
post #71

Earlier quoted context omitted.

Let's all sit and reflect for a moment that Apple was the first (and for a long time, the only) company that used to get sleep/wake "right".

And now I'm sad. This was one of the reasons I never adopted Linux on a laptop. Power management simply never worked. I used Windows for many years on a ThinkPad with Linux in a VM but this felt dirty. Bought a Mac and life was good. Well it was until 10.13. 50% of wake up events I have to log in to a trashed desktop now. It makes me long for a computer nailed to a bit of ethernet that is never turned off. Edit: also…

Using external displays, and half the time come back from sleep with most of my apps 95% off screen, it's annoying at best.

Re: macOS lock screen: “I just sent my session pass to my whole team”

#160
post #136

FWIW this is a known security bug at Apple. I filed a bug about similar behavior where you can see the desktop briefly without logging in. Apple marked it as a duplicate. https://imgur.com/YxXtU2y Here are the steps to reproduce: - Start Mac - Login - Turn on Screen Lock: System Preferences > Security > General > Check "Require Password" and Select 5 Seconds. - Turn on Hot Corner Sleep Display: System Preferences > M…

I used to get the desktop flash reliably by simplistische disconnecting or reconnecting an external monitor. High Sierra fixed it.
Post reply on HN