Welcome to the MacNN Forums.

If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

You are here: MacNN Forums > Software - Troubleshooting and Discussion > Mac OS X > Log-in security misbehaviour.

Log-in security misbehaviour.
Thread Tools
Mac Elite
Join Date: Oct 2000
Status: Offline
Reply With Quote
Nov 23, 2004, 11:24 AM
 
A friend of mine was messing around trying to login to my my account (from another non-Admin account).

After 3 incorrect attempts login asked if he wanted to reset the master password for my account, and accepted ANYTHING!

Now that shouldn't happen - and hasn't since. Any ideas?
     
Addicted to MacNN
Join Date: Aug 2004
Location: Outfield - #24
Status: Offline
Reply With Quote
Nov 23, 2004, 09:24 PM
 
Yikes. I've never seen that happen before...
     
Mac Elite
Join Date: Sep 2001
Location: Chico, CA and Carlsbad, CA.
Status: Offline
Reply With Quote
Nov 23, 2004, 11:03 PM
 
Originally posted by booboo:
A friend of mine was messing around trying to login to my my account (from another non-Admin account).

After 3 incorrect attempts login asked if he wanted to reset the master password for my account, and accepted ANYTHING!

Now that shouldn't happen - and hasn't since. Any ideas?
Whoa... I have never seen that happen. This was all from the Login Window? Were any other users logged in (fast user switching)?
"In Nomine Patris, Et Fili, Et Spiritus Sancti"

     
booboo  (op)
Mac Elite
Join Date: Oct 2000
Status: Offline
Reply With Quote
Nov 24, 2004, 05:27 AM
 
My (admin) account was running, and I had switched to a secondary (non-admin) account. My friend was attempting to guess my password to get back into my account in order to buy some songs on my iTunes account!

I had never even seen the reset master password dialogue before.

I couldn't believe that it was happening either, and verified it by switching to the secondary account, and then logging back into my account using anything for the password. The login window did its familiar dance for incorrect password 3 times and then allowed anything to be input for a new password. I got a message about a new keychain would be created for the new password . . .

It worked every time.

Anyway, I restarted, and since then behaviour has been normal.
     
Addicted to MacNN
Join Date: Aug 2004
Location: Outfield - #24
Status: Offline
Reply With Quote
Nov 24, 2004, 06:17 AM
 
Originally posted by booboo:
My (admin) account was running, and I had switched to a secondary (non-admin) account. My friend was attempting to guess my password to get back into my account in order to buy some songs on my iTunes account!
Nice friend.

     
Posting Junkie
Join Date: Mar 2004
Location: MacNN database error. Please refresh your browser.
Status: Offline
Reply With Quote
Nov 24, 2004, 06:26 AM
 
Under account settings and security, you should have some extra options. Toggle the ones for the most security, then lock the options so they can't be changed.
Oh, and get some new friends as well. Sounds like a real pr1ck.

This is a computer-generated message and needs no signature.
     
Mac Elite
Join Date: Feb 2003
Location: columbus, oh
Status: Offline
Reply With Quote
Nov 24, 2004, 09:28 AM
 
I've seen that happen here at work as well. I noticed that it mainly occurs if the machine has a password hint available. Really bad security IMO.
"Another classic science-fiction show cancelled before its time" ~ Bender

15.2" PowerBook 1.25GHz, 80GB HD, 768MB RAM, SuperDrive
     
booboo  (op)
Mac Elite
Join Date: Oct 2000
Status: Offline
Reply With Quote
Nov 24, 2004, 04:06 PM
 
Originally posted by OptimusG4:
I've seen that happen here at work as well. I noticed that it mainly occurs if the machine has a password hint available. Really bad security IMO.
I think I'll lose the hint. It is a worrying issue though.

Oh and it's OK about my friend trying to use my account - it was all in fun.
     
   
Thread Tools
Forum Links
Forum Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On
Top
Privacy Policy
All times are GMT -5. The time now is 11:01 AM.
All contents of these forums © 1995-2011 MacNN. All rights reserved.
Branding + Design: www.gesamtbild.com
vBulletin v.3.8.7 © 2000-2011, Jelsoft Enterprises Ltd., Content Relevant URLs by vBSEO 3.3.2