[35761] in bugtraq

home	help	back	first	fref	pref	prev	next	nref	lref	last	post

Re: Mac OS X stores login/Keychain/FileVault passwords on disk

daemon@ATHENA.MIT.EDU (Theo Van Dinter)
Sat Jul 17 12:42:06 2004

Date: Thu, 15 Jul 2004 16:01:37 -0400
From: Theo Van Dinter <felicity@kluge.net>
To: bugtraq@securityfocus.com
Message-ID: <20040715200137.GF4812@kluge.net>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="AZ3TfZx6WW1DY2Jl"
Content-Disposition: inline
In-Reply-To: <200407121105.46280.adi@cg.tuwien.ac.at>


--AZ3TfZx6WW1DY2Jl
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Mon, Jul 12, 2004 at 11:05:45AM +0200, Adi Kriegisch wrote:
> So if you loose your powerbook someone might boot it in "target disk mode=
" and=20
> will be able to get your password!

FWIW: You can enable the security features of OpenFirmware on modern Apple
hardware, such that things like "boot from CD", "target disk mode", etc,
are all disabled.

It adds at least another barrier for people to have to get around to
get your data.  More information is available via a Google search,
but the following URL is a pretty good reference:

http://www.mactipsandtricks.com/tips/display.lasso?mactip=3D118

--=20
Randomly Generated Tagline:
I'm a white male, aged 18 to 49.  Everyone listens to me!  No matter
 how dumb my suggestions are.
=20
 		-- Homer Simpson
 		   Lisa vs. Malibu Stacy

--AZ3TfZx6WW1DY2Jl
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFA9uKh7tgKAJaXVyoRArtiAJ458tV3qo+7bvSELiyK0ETbMAgKXACcC4t2
2hr0h2tJaVLf47Tt/l2VJtU=
=5DSU
-----END PGP SIGNATURE-----

--AZ3TfZx6WW1DY2Jl--

home	help	back	first	fref	pref	prev	next	nref	lref	last	post