Re:New macOS malware steals info, including a user's entire ...
by atty on Saturday April 15, 2023 @04:08PM
(#35584080)
Agreed. I am so trained by macOS that it needs my iCloud password or account password randomly that I don’t even think about it anymore. I like to consider myself a savvy computer user, but I frankly only give myself a 50% chance at best of identifying a malicious password prompt at this point.
This is something that hasn't been fixed despite years of complaints from the security community for exactly this reason.
It's especially annoying as touchid provides a standard authentication mechanism on macOS, that doesn't provide reusable credentials to anything.