macOS lock screen: “I just sent my session pass to my whole team”

Re:macOS lock screen: “I just sent my session pass to my who... by monochromatic on Friday December 08, 2017 @11:55AM (#15880041)

Especially here, where it’s (probably?) not remotely exploitable.

[ Parent | on HN ]

Re:macOS lock screen: “I just sent my session pass to my who... by zamalek on Friday December 08, 2017 @11:59AM (#15880072)

> probably

Show and focus a window when the user locks their machine.

[ Parent | on HN ]

Re:macOS lock screen: “I just sent my session pass to my who... by brazzledazzle on Friday December 08, 2017 @01:25PM (#15880709)

Yeah. You can do keystroke logging without root but typing into password fields can't be intercepted. This would be a nice complement to that capability.

[ Parent | on HN ]

Re:macOS lock screen: “I just sent my session pass to my who... by daveFNbuck on Friday December 08, 2017 @01:31PM (#15880745)

How do you do that?

[ Parent | on HN ]

Re:macOS lock screen: “I just sent my session pass to my who... by fleitz on Friday December 08, 2017 @02:46PM (#15881408)

    - (void) viewDidAppear{
       [super viewDidAppear];
       [self.passwordfield becomeFirstResponder];
    }

[ Parent | on HN ]

Re:macOS lock screen: “I just sent my session pass to my who... by fleitz on Friday December 08, 2017 @03:54PM (#15881966)

I guess I got down voted for Obj C code, here's the swift version:

   func viewDidAppear(){ 
     super.viewDidAppear() 
     passwordField.becomeFirstResponder()
   }

[ Parent | on HN ]

Re:macOS lock screen: “I just sent my session pass to my who... by blattimwind on Friday December 08, 2017 @02:17PM (#15881146)

Having your password in some IRC channel gets remotely exploitable quickly.

[ Parent | on HN ]

Re:macOS lock screen: “I just sent my session pass to my who... by floatboth on Friday December 08, 2017 @02:49PM (#15881429)

If you reused the password, yeah, instant pwnage everywhere. If your local account password isn't used anywhere else, meh, random IRC people don't have physical access to your machine :)

[ Parent | on HN ]

Re:macOS lock screen: “I just sent my session pass to my who... by davrosthedalek on Friday December 08, 2017 @03:39PM (#15881844)

No need to reuse your password. If the machine has sshd enabled, the attacker only has to guess the account name, but that's hopefully a lot easier than guessing the password.

[ Parent | on HN ]

Re:macOS lock screen: “I just sent my session pass to my who... by pornel on Friday December 08, 2017 @03:38PM (#15881839)

Unless you have remote SSH logon enabled and IRC exposes your IP address.

[ Parent | on HN ]

Re:macOS lock screen: “I just sent my session pass to my who... by Fnoord on Friday December 08, 2017 @04:18PM (#15882132)

Depends how you authenticate with your password. You could use pubkey with or without a password. Even if you reuse the password there, even if they have your password, if they don't have your private key they can't authenticate.

[ Parent | on HN ]

Re:macOS lock screen: “I just sent my session pass to my who... by floatboth on Saturday December 09, 2017 @12:41PM (#15886912)

Remote logon with passwords allowed and sshd exposed to the whole internet (not behind ISP's NAT, not behind home NAT, port allowed on home firewall, port allowed on laptop firewall).

[ Parent | on HN ]

Re:macOS lock screen: “I just sent my session pass to my who... by cuckcuckspruce on Friday December 08, 2017 @04:55PM (#15882408)

Yet another reason to only use SSH keys.

[ Parent | on HN ]

Re:macOS lock screen: “I just sent my session pass to my who... by bartvk on Saturday December 09, 2017 @02:13AM (#15884680)

No, because if you type in your pw, it will show as stars ;-)

[ Parent | on HN ]