Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

AppStore Preferences can be unlocked by a local admin with any bogus password

openradar.appspot.com

Post reply on HN
Print view View original

181–190 of 190 posts

Re: AppStore Preferences can be unlocked by a local admin with any bogus password

#181

Post by hanklazard »

djsumdog wrote: post #128
hanklazard wrote: post #72

Earlier quoted context omitted.

I'm also a long-time Mac user, but I've really had about enough of this. Between the seemingly constant stream of security problems and the dumbing down of OSX (MacOS, whatever), I'm not sure I'm willing to pay a premium for this product anymore. At the same time the Apple seems to be dropping the ball, some of the more noob-friendly linux distros are starting to look very attractive. And while Apple still seems to h…

Dells and Lenovos both have a lot of their hardware supported in most major Linux distributions. I run Gentoo on two Dells without any major issues. I really prefer Linux over MacOS and have been lucky that at my last three jobs I've been able to use Linux natively on my work laptops/desktops. Using a tiling window manager like i3 also make things so much easier as well. It may not look as pretty, but from a utility…

Thanks for the tip. Bought an X1 pre-owned yesterday and am planning to try native Mint on it.

Re: AppStore Preferences can be unlocked by a local admin with any bogus password

#182

Post by dajohnson89 »

dkonofalski wrote: post #112
raverbashing wrote: post #73

Earlier quoted context omitted.

Disabling password requirements for app purchases Disabling/enabling automatic updates

The App Store would prompt them for the Apple ID password for the first purchase made after this change. I fail to see how automatic updates would be "awful".

install an app on host machine, and then release a malicious update for it.

Re: AppStore Preferences can be unlocked by a local admin with any bogus password

#183

Post by Corrado »

I don't know if I'm doing it wrong or maybe the problem has been fixed in the latest beta, but I can't replicate the problem on 10.13.3 Beta (17D34a). I lock the App Store preference pane and can't unlock it with anything except my real password. And yes, I am logged in as an Admin user.

Re: AppStore Preferences can be unlocked by a local admin with any bogus password

#184

Post by mygo »

astrodust wrote: post #171
mygo wrote: post #160

Earlier quoted context omitted.

Just hire a woman who is in her 3rd trimester and you can cut that baby down to 3 months. ...

Visit the maternity ward. Problem solved.

Say why don’t you give us a call back when you’re in labor and we can have that job interview?

Re: AppStore Preferences can be unlocked by a local admin with any bogus password

#185

Post by nabeards »

dkonofalski wrote: post #113
nabeards wrote: post #64

Earlier quoted context omitted.

Interesting, I do have the lock in Sierra 10.12.6 on my MBP.

That is interesting. I wonder if I update Sierra to the latest if it will show up. Does your lock work as expected?

Yes, works fine for me. :)

Re: AppStore Preferences can be unlocked by a local admin with any bogus password

#186

Post by newscracker »

miles wrote: post #59
newscracker wrote: post #13

This does not help at all for the drubbing that macOS High Sierra has been getting recently. Long term OS X users have been waiting for a Snow Leopard like release, but it seems like Apple isn’t taking as much care as required on security and stability on the Mac. Something has to give — either Apple’s organizational structure needs a change or Apple needs to abandon certain things completely instead of releasing sub…

> it seems like Apple isn’t taking as much care as required on security and stability on the Mac It's even worse than that according to[0] Mark Gurman[1]: In another sign that the company has prioritized the iPhone, Apple re-organized its software engineering department so there's no longer a dedicated Mac operating system team. There is now just one team, and most of the engineers are iOS first, giving the people wo…

This reassignment and movement of people to the iPhone/iPad side has been happening for a long time. That's why I referred to the organizational structure, because the company is not equipped to handle so many things quite well (which has its advantages and disadvantages). One write up about this topic, which I share somewhat often is on Stratechery. [1]. That's worth a read.

[1]: https://stratechery.com/2016/apples-organizational-crossroad...

Re: AppStore Preferences can be unlocked by a local admin with any bogus password

#187

Post by newscracker »

hanklazard wrote: post #72
newscracker wrote: post #13

This does not help at all for the drubbing that macOS High Sierra has been getting recently. Long term OS X users have been waiting for a Snow Leopard like release, but it seems like Apple isn’t taking as much care as required on security and stability on the Mac. Something has to give — either Apple’s organizational structure needs a change or Apple needs to abandon certain things completely instead of releasing sub…

I'm also a long-time Mac user, but I've really had about enough of this. Between the seemingly constant stream of security problems and the dumbing down of OSX (MacOS, whatever), I'm not sure I'm willing to pay a premium for this product anymore. At the same time the Apple seems to be dropping the ball, some of the more noob-friendly linux distros are starting to look very attractive. And while Apple still seems to h…

I don't have direct experience with 1Password on Linux, but customers have complained about how AgileBits has treated the Windows and Android builds as third class citizens and not put in a lot of effort into those. So I'd be cautious, try it out and then decide instead of taking someone else's word for it.

For multi-platform password managers with browser extensions, Enpass (enpass.io) is an option. Dash lane is another, though it's about as expensive (or more) than the 1Password subscription that AgileBits pushes (the dark pattern on the AgileBits website about completely hiding the standalone license is something I don't like).

Re: AppStore Preferences can be unlocked by a local admin with any bogus password

#188

Post by voltagex_ »

willtim wrote: post #179
voltagex_ wrote: post #150

Earlier quoted context omitted.

As a counterpoint, the display inverter on my 3433CTO failed after 18 months. It's a $19 part - Lenovo wanted $400 to repair it. I moved to the Dell XPS 9350. The display failed. The wifi card is a $5 part in a $3000 machine and failed.

My X1 Carbon came with a 3 year on-site repair warranty as standard, included in the price (contrast this with AppleCare which is very expensive). Did you buy yours from Lenovo?

Yes, and I'm also covered by the excellent Australian Consumer Law. They ran me around for 6 months, sent invoices and logs with the wrong name on it and I eventually gave up.

Re: AppStore Preferences can be unlocked by a local admin with any bogus password

#189

Post by dkonofalski »

dajohnson89 wrote: post #182
dkonofalski wrote: post #112

Earlier quoted context omitted.

The App Store would prompt them for the Apple ID password for the first purchase made after this change. I fail to see how automatic updates would be "awful".

install an app on host machine, and then release a malicious update for it.

That would require Apple to approve the malicious update which probably won't happen. Not an issue.

Re: AppStore Preferences can be unlocked by a local admin with any bogus password

#190

Post by rhizome »

astrodust wrote: post #172
rhizome wrote: post #108

Earlier quoted context omitted.

Microsoft Cairo...finally!

You mean Taligent : https://en.wikipedia.org/wiki/Taligent

Taligent was a replacement, not a merge like Cairo was supposed to be.
Post reply on HN