Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

macOS lock screen: “I just sent my session pass to my whole team”

twitter.com

Post reply on HN
Print view View original

201–210 of 276 posts

Re: macOS lock screen: “I just sent my session pass to my whole team”

#201

Post by Someone1234 »

gaius wrote: post #190
kyberias wrote: post #187

Earlier quoted context omitted.

You're kinda both right. But the focus-protection part has nothing to do with SAS.

Consider https://superuser.com/a/61772

Not really sure what you think that adds.

Nobody is denying that the "anti-hijacking" forcing of CTRL-ALT-Delete adds to security, what they're saying is that it has nothing to do with this topic.

This topic is about keyboard input focus. In Windows, due to the process hierarchy the login UI isn't running in the same context as desktop applications, so stealing focus or focus drift couldn't occur.

Re: macOS lock screen: “I just sent my session pass to my whole team”

#202

Post by pfranz »

feelin_googley wrote: post #178
gonational wrote: post #63

With no disrespect to the developers at Apple, et al, each one of these problems that goes viral before reaching “proper” channels is a well-deserved slap in the face of these behemoth organizations. Perhaps, if the entire tech community regards Apple as a joke, they will start paying attention. “Responsible disclosure” is great stuff for creating a culture of free outsourcing of tech companies’ most imporant feature…

"With no disrespect to the developers at Apple, et. al., each one of these problems that goes viral before reaching "proper" channels..." s/that goes viral before reaching \"proper\" channels// The fact that the problems existed to begin with is more troubling than whether they became known outside the company or not. IMO. With an open source UNIX-like OS (like the ones Apple sourced from for parts of macOS), both th…

In addition to the many xscreensaver bugs over the years that the sibling post mentioned, last year there was a systemd root escalation exploit that was the same class of programming error as Apple's bug that enabled the root account with an empty password. From my understanding, in both cases they misinterpreted the return code's magic number (-1) as something it wasn't.

Also, Linus' Law has some doubters. Things like Heartbleed show that Open Source isn't immune to long-standing, very impactful bugs.

Re: macOS lock screen: “I just sent my session pass to my whole team”

#203

Post by deathanatos »

ryandrake wrote: post #175
tracker1 wrote: post #161

Earlier quoted context omitted.

Linux specifically has a horrible track record for sleep/battery management in laptops, and worse recovery. Windows used to be far more buggy, but the long XP era a lot of that was fixed by XP SP3. Aside: I just wish there was an option in Mac to use "PC Shortcuts" in all my apps... it's the only place where some of the key combinations feel truly alien in most apps. I use a "PC" keyboard, but remap CMD to CTRL, ALT…

Not just a horrible track record, but the current state is also bad. I have a pretty recent Debian install on a bog standard Lenovo which otherwise runs Linux beautifully. It took days of fiddling with conf files and trying things out to get Suspend and Hibernation to work in a sensible way. The kernel, systemd and Gnome all try to do stuff, but they can't seem to agree on who's responsible for what part of power man…

I installed Arch on a T460p, and suspend-to-RAM worked out of the box. (And this has been my experience w/ Thinkpads and Linux for well over a decade now. Now, I don't do suspend-to-disk, because I dislike it.)

Re: macOS lock screen: “I just sent my session pass to my whole team”

#204

Post by pfranz »

malchow wrote: post #31

Not to pile on, but my MBP (with "TouchBar" which will assuredly not exist in another year) is always in clamshell mode and connected to two external LG 4K displays. Whether, on which screen(s), or in what state the Mac wakes each morning is completely random. Sometimes it doesn't wake at all. Sometimes I have artifacts on one screen and a desktop on another screen. The sleep/wake sequence is a complete mess, and it…

Clamshell mode has notoriously been a problem for many years over a bunch of models. Sleep/wake has usually been way better than Windows or Linux, but has also had it's share of problems. The sleep/wake issues usually get fixed, the clamshell issues from what I've gathered get resolved less often.

Re: macOS lock screen: “I just sent my session pass to my whole team”

#205

Post by gaius »

Someone1234 wrote: post #201
gaius wrote: post #190

Earlier quoted context omitted.

Consider https://superuser.com/a/61772

Not really sure what you think that adds. Nobody is denying that the "anti-hijacking" forcing of CTRL-ALT-Delete adds to security, what they're saying is that it has nothing to do with this topic. This topic is about keyboard input focus. In Windows, due to the process hierarchy the login UI isn't running in the same context as desktop applications, so stealing focus or focus drift couldn't occur.

This topic is about keyboard input focus.

Yes, and the SAS guarantees that after you enter it, nothing else can have keyboard focus. I don't see why this is such a controversial point. You will never come to unlock your NT workstation and find that the keyboard focus is somewhere you don't expect, because you need to enter the SAS first.

Re: macOS lock screen: “I just sent my session pass to my whole team”

#206

Post by michel-slm »

rootusrootus wrote: post #84
1_2__4 wrote: post #71

Earlier quoted context omitted.

Let's all sit and reflect for a moment that Apple was the first (and for a long time, the only) company that used to get sleep/wake "right".

In my experience there have been problems for a while with sleep/wake if you have external monitors. I'm running 10.12 (work computer, no option for 10.13 yet), and I have three monitors connected to my MBP. I had to adopt a ritual about disconnecting the first screen, then lifting the lid a bit to activate the internal display, then disconnect the other two monitors, then close the lid. Otherwise more often than not…

That's similar to my experience when using HDMI cables. Switched to using USB C -> MiniDP cables and things are better now, except since I can't daisy-chain the two monitors with DisplayPort (the rMBP can't drive them both, a Thinkpad happily would) that means two out of the four USB C ports are used up.

Still getting random freezes sleeping and waking though. Especially if I don't open the internal panel before disconnecting the external monitors and USB hub before putting the laptop to sleep.

Re: macOS lock screen: “I just sent my session pass to my whole team”

#207

Post by joeblau »

tracker1 wrote: post #164
joeblau wrote: post #152

Earlier quoted context omitted.

I'm guessing that it's going to be pretty difficult to hire an engineer who is: - Very good - Wants to live near Palo Alto - Is able to live in the US - Wants to be subjected to Apple's privacy rules - Wants to work on fixing bugs instead of making new features In the software engineering game, money only goes so far.

I'm pretty sure you'd find a LOT of people to do that work for $300k/year... Apple has lots of money to go as far as they like.

Yeah, but if you can make $300k a year, you're likely not dedicating your software engineering career to fixing bugs. Also, you can go a few miles south to Los Gatos and work at Netflix and make $400k/year.

Re: macOS lock screen: “I just sent my session pass to my whole team”

#208

Post by eridius »

zeveb wrote: post #198
eridius wrote: post #181

Earlier quoted context omitted.

> Strongly disagree, and I can not conceive of how it could be viewed as "better" than hardware keys. I hope this is hyperbole, because it shouldn't be hard to understand. The TouchBar is absolutely an improvement. I can't remember the last time I actually used a laptop keyboard's F-keys for anything, but the TouchBar makes that space useful.

> I can't remember the last time I actually used a laptop keyboard's F-keys for anything I use them regularly to switch consoles. MacOS supports multiple consoles, right?

By consoles do you mean terminals? Terminal.app uses ⌘⌥1–9 to switch windows and ⌘1–9 to switch tabs. The F-keys aren't used by Terminal.app at all (well, they're sent to the terminal as an escape sequence).

Re: macOS lock screen: “I just sent my session pass to my whole team”

#209

Post by vthriller »

eridius wrote: post #181
DoodleBuggy wrote: post #96

Earlier quoted context omitted.

> but I disagree on the touchbar. It’s one of the better things Apple has added recently. Strongly disagree, and I can not conceive of how it could be viewed as "better" than hardware keys. Maybe if they moved it above the FN row and we regained the hardware escape key, while making it a build to order option. Even then, I personally would have no interest in it, and neither would anyone else I know. I do not want to…

> Strongly disagree, and I can not conceive of how it could be viewed as "better" than hardware keys. I hope this is hyperbole, because it shouldn't be hard to understand. The TouchBar is absolutely an improvement. I can't remember the last time I actually used a laptop keyboard's F-keys for anything, but the TouchBar makes that space useful.

> I can't remember the last time I actually used a laptop keyboard's F-keys for anything

Not even F5 in a web browser?

Re: macOS lock screen: “I just sent my session pass to my whole team”

#210

Post by joeblau »

sangnoir wrote: post #173
joeblau wrote: post #152

Earlier quoted context omitted.

I'm guessing that it's going to be pretty difficult to hire an engineer who is: - Very good - Wants to live near Palo Alto - Is able to live in the US - Wants to be subjected to Apple's privacy rules - Wants to work on fixing bugs instead of making new features In the software engineering game, money only goes so far.

Only the first issue can't be solved by throwing more money at it.

If someone is good and can't get a Visa to move to the U.S. more money won't help that either.
Post reply on HN