21–30 of 130 posts
Earlier quoted context omitted.
I'd prefer it to work like a normal computer where there's a separation of the OS and the hardware. But sure, other phones aren't better.
I'm not sure I've used any operating system where I have more privilege than the kernel does.
This may be annoying, but it’s uploading encrypted versions of passwords, not passwords themselves. Keychain is end-to-end encrypted so no one else can read them.
Earlier quoted context omitted.
They say they can’t, but it’s impossible to be certain. Although, if you distrust Apple enough to think they might lie about it, you probably wouldn’t want to use any Apple device or services. They already have privileged access to the software and hardware.
Yes. SIP means Apple is the real sudo now. You can’t disable their special relationship on their computers
https://developer.apple.com/documentation/security/disabling...
Earlier quoted context omitted.
I'm considered switching to Mac from linux and I came across your blog which has been very informative. What made you chose mac over linux?
I didn't choose Mac over Linux. I chose Mac over Windows in the year 2002, and I became a Mac developer in 2006. Things were a lot different back then. Now it's too late for me, because my entire livelihood depends on Mac.
Earlier quoted context omitted.
Are you sure Apple can’t read them too?
Are you sure AES 256-bit hasn't been broken?
Earlier quoted context omitted.
Are you sure AES 256-bit hasn't been broken?
Best practices for password storage use one-way hash functions (like bcrypt, Argon2, or PBKDF2) rather than encryption algorithms like AES. AES is not one way and in theory you can generate 2nd, 3rd, etc. master keys to decrypt. :)
thats how cloud stored password managers work..
And you should also know...
Best practices for password storage use one-way hash functions (like bcrypt, Argon2, or PBKDF2).
Earlier quoted context omitted.
How do you know?
Why do you want to know?
thats how cloud stored password managers work..
They silently enable the option to store in the Cloud on OS update? They offer no option to delete your passwords from the Cloud once there? If that's indeed how they all/always work, we shouldn't just Stockholm-syndrome accept it!
Seems pretty trivial to download the icloud windows client (which has password manager support), and modify/delete the passwords there?