News for hackers. Stuff that matters.
Re:OS X – Safe, yet horribly insecure by xsive on Saturday June 25, 2011 @10:53PM (#2697255)
> on a unix server, you have to be root to read everyone's data.

> on an os x laptop, you can be the logged-in user and read everyone's data

Shenanigans. Unless you have the password of the logged in user, you can't read stuff belonging to other users. Further, if the user in question does not have an Admin account, you're shit out of luck even if you do know their password.

Re:OS X – Safe, yet horribly insecure by tzs on Sunday June 26, 2011 @01:09AM (#2697423)
> Shenanigans. Unless you have the password of the logged in user, you can't read stuff belonging to other users

Their home directory defaults to world readable, and the default umask is set so documents created are world readable, so you can read things in their home directories.

The Desktop, Documents, and so on directories are 700, so things in those should be unreadable.

Re:OS X – Safe, yet horribly insecure by mveldthuis on Sunday June 26, 2011 @03:29AM (#2697629)
I think his point was that on a laptop, everyone is often just the one logged in user.
Re:OS X – Safe, yet horribly insecure by riffic on Sunday June 26, 2011 @02:54AM (#2697582)
reboot into single user mode, be root, read anything.

if you have physical access you can do anything

Re:OS X – Safe, yet horribly insecure by jvdh on Sunday June 26, 2011 @10:21AM (#2698028)
This article is not about physical access, it's about remote security.

If you have physical access to a machine, then you can almost always read the files off of it, except in certain cases with encrypted volumes.