Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

macOS lock screen: “I just sent my session pass to my whole team”

twitter.com

Post reply on HN
Print view View original

181–190 of 276 posts

Re: macOS lock screen: “I just sent my session pass to my whole team”

#181

Post by eridius »

DoodleBuggy wrote: post #96
dawnerd wrote: post #79

Earlier quoted context omitted.

Same problems as you, but I disagree on the touchbar. It’s one of the better things Apple has added recently. But holy hell do they need to work on their external monitor support. Yesterday I had one of my monitors randomly go black for a second. I’ve had audio over usbc just not show up anymore and it refusing to see my gigabit ethernet when waking up unless I unplug the actual ethernet cable. Simply amazing this pa…

> but I disagree on the touchbar. It’s one of the better things Apple has added recently. Strongly disagree, and I can not conceive of how it could be viewed as "better" than hardware keys. Maybe if they moved it above the FN row and we regained the hardware escape key, while making it a build to order option. Even then, I personally would have no interest in it, and neither would anyone else I know. I do not want to…

> Strongly disagree, and I can not conceive of how it could be viewed as "better" than hardware keys.

I hope this is hyperbole, because it shouldn't be hard to understand. The TouchBar is absolutely an improvement. I can't remember the last time I actually used a laptop keyboard's F-keys for anything, but the TouchBar makes that space useful.

Re: macOS lock screen: “I just sent my session pass to my whole team”

#182

Post by gaius »

JdeBP wrote: post #144
gaius wrote: post #121

This is why Windows NT ensures no user process can intercept Ctrl-Alt-Del.

No. It is nothing to do with secure attention. This is why Windows NT runs the log-on user interface, the screen saver, and the elevation consent UI on separate desktops that have restrictive ACLs disallowing interactive user processes from creating windows there.

The SAS is specifically so no one can hijack/spoof the password dialog. When you enter it you can be 100% certain you are talking to NT.

Re: macOS lock screen: “I just sent my session pass to my whole team”

#183

Post by suresk »

This has been a very sporadic issue that I've seen once or twice per year at most, for quite a while with OS X - somehow, another window is able to steal focus from the login screen. I've never been able to reproduce it reliably or find a common element in all of the times it has happened, but it definitely has happened to me and I've also seen co-workers dropping their login password in a chat window due to this. But it is pretty rare, so hard to pin down.

I've also noticed another thing happening more lately - locking the screen, only to have it automatically unlock itself a second or two later. I always have to make sure it actually stays on the screensaver for a few seconds before I trust it will actually lock.

Re: macOS lock screen: “I just sent my session pass to my whole team”

#184

Post by chungy »

arprocter wrote: post #87
dawnerd wrote: post #79

Earlier quoted context omitted.

Same problems as you, but I disagree on the touchbar. It’s one of the better things Apple has added recently. But holy hell do they need to work on their external monitor support. Yesterday I had one of my monitors randomly go black for a second. I’ve had audio over usbc just not show up anymore and it refusing to see my gigabit ethernet when waking up unless I unplug the actual ethernet cable. Simply amazing this pa…

My iMac seems to get a 169 IP on wake-up about once a week No problems with my Debian or Win 7 boxes which are presumably on the same switch

That's a link-local IPv4 address, typically means that it hasn't got a lease from your DHCP server.

Re: macOS lock screen: “I just sent my session pass to my whole team”

#185

Post by pornel »

floatboth wrote: post #149
blattimwind wrote: post #131

Earlier quoted context omitted.

Having your password in some IRC channel gets remotely exploitable quickly.

If you reused the password, yeah, instant pwnage everywhere. If your local account password isn't used anywhere else, meh, random IRC people don't have physical access to your machine :)

Unless you have remote SSH logon enabled and IRC exposes your IP address.

Re: macOS lock screen: “I just sent my session pass to my whole team”

#186

Post by davrosthedalek »

floatboth wrote: post #149
blattimwind wrote: post #131

Earlier quoted context omitted.

Having your password in some IRC channel gets remotely exploitable quickly.

If you reused the password, yeah, instant pwnage everywhere. If your local account password isn't used anywhere else, meh, random IRC people don't have physical access to your machine :)

No need to reuse your password. If the machine has sshd enabled, the attacker only has to guess the account name, but that's hopefully a lot easier than guessing the password.

Re: macOS lock screen: “I just sent my session pass to my whole team”

#187

Post by kyberias »

gaius wrote: post #182
JdeBP wrote: post #144

Earlier quoted context omitted.

No. It is nothing to do with secure attention. This is why Windows NT runs the log-on user interface, the screen saver, and the elevation consent UI on separate desktops that have restrictive ACLs disallowing interactive user processes from creating windows there.

The SAS is specifically so no one can hijack/spoof the password dialog. When you enter it you can be 100% certain you are talking to NT.

You're kinda both right. But the focus-protection part has nothing to do with SAS.

Re: macOS lock screen: “I just sent my session pass to my whole team”

#188

Post by gaius »

EpicEng wrote: post #127
gaius wrote: post #120

Earlier quoted context omitted.

Who can respect a vendor that assigns engineers to work on the animated poop icon instead of basic security?

Yes because I'm sure those same people are also able to work on security.

Someone made the decision, this year we will hire X number of security engineers and Y number of poop animators. Ultimately that guy is Tim Cook.

Re: macOS lock screen: “I just sent my session pass to my whole team”

#189

Post by willis77 »

malchow wrote: post #31

Not to pile on, but my MBP (with "TouchBar" which will assuredly not exist in another year) is always in clamshell mode and connected to two external LG 4K displays. Whether, on which screen(s), or in what state the Mac wakes each morning is completely random. Sometimes it doesn't wake at all. Sometimes I have artifacts on one screen and a desktop on another screen. The sleep/wake sequence is a complete mess, and it…

Same issues here. I dread having to unplug or shutdown my MBP connected to 2 external monitors because it means I'll have to reconfigure the displays.

Re: macOS lock screen: “I just sent my session pass to my whole team”

#190

Post by gaius »

kyberias wrote: post #187
gaius wrote: post #182

Earlier quoted context omitted.

The SAS is specifically so no one can hijack/spoof the password dialog. When you enter it you can be 100% certain you are talking to NT.

You're kinda both right. But the focus-protection part has nothing to do with SAS.

Consider https://superuser.com/a/61772
Post reply on HN