News for hackers. Stuff that matters.
Re:macOS lock screen: “I just sent my session pass to my who... by floatboth on Friday December 08, 2017 @02:49PM (#15881429)
If you reused the password, yeah, instant pwnage everywhere. If your local account password isn't used anywhere else, meh, random IRC people don't have physical access to your machine :)
Re:macOS lock screen: “I just sent my session pass to my who... by davrosthedalek on Friday December 08, 2017 @03:39PM (#15881844)
No need to reuse your password. If the machine has sshd enabled, the attacker only has to guess the account name, but that's hopefully a lot easier than guessing the password.
Re:macOS lock screen: “I just sent my session pass to my who... by pornel on Friday December 08, 2017 @03:38PM (#15881839)
Unless you have remote SSH logon enabled and IRC exposes your IP address.
Re:macOS lock screen: “I just sent my session pass to my who... by Fnoord on Friday December 08, 2017 @04:18PM (#15882132)
Depends how you authenticate with your password. You could use pubkey with or without a password. Even if you reuse the password there, even if they have your password, if they don't have your private key they can't authenticate.
Re:macOS lock screen: “I just sent my session pass to my who... by floatboth on Saturday December 09, 2017 @12:41PM (#15886912)
Remote logon with passwords allowed and sshd exposed to the whole internet (not behind ISP's NAT, not behind home NAT, port allowed on home firewall, port allowed on laptop firewall).
Re:macOS lock screen: “I just sent my session pass to my who... by cuckcuckspruce on Friday December 08, 2017 @04:55PM (#15882408)
Yet another reason to only use SSH keys.