Being remotely harassed

Discussion in 'macOS' started by murmeldjur, Apr 23, 2013.

  1. murmeldjur, Apr 23, 2013
    Last edited: Apr 23, 2013

    murmeldjur macrumors newbie

    Joined:
    Apr 23, 2013
    #1
    I don't know why and how, but my background is being changed on my computer. I think it is done remotely, and I know it is my colleagues doing this.

    I have a freshly bought and installed MacBook Pro (2012 edition), fully up to date.
    I have password protection, I switch password every now and then (when being offline, so they can't sniff it). So I am pretty sure they don't know my password.

    I have an active Apache server, with PHP enabled and a MySQL database.

    The only way we are connected otherwise are through SVN (a version control for files and projects).

    How can they somehow upload an image and change my desktop background, most probably, remotely?

    Please help, I don't like the idea of them being able to control my Mac.

    Edit: Is there anything else you need to know to be able to help me?
     
  2. Gav2k macrumors G3

    Gav2k

    Joined:
    Jul 24, 2009
    #2
    Is it a custom pic or is it one of the pre installed backgrounds as you can set you mac to randomly chose and change the background.
     
  3. benwiggy macrumors 68020

    Joined:
    Jun 15, 2012
    #3
    The chances are very slim that this is because of some external interference.

    How do you know that your colleagues are doing this? Are you sure that they do not have physical access to the machine? Have you turned on password to wake after the screensaver is active?

    Is this a work computer? Perhaps you should take up the matter with your manager.
     
  4. Idarzoid macrumors 6502

    Joined:
    Mar 15, 2013
    #4
    Disable screen sharing/vnc if you're not using it, if it's disabled then that narrows it down.

    How is SSH configured?
     
  5. ChrisA macrumors G4

    Joined:
    Jan 5, 2006
    Location:
    Redondo Beach, California
    #5
    None of your security precautions apply if others are allowed physical access to the computer. They can boot it from their own external disk or a CD.

    Also you may have other accounts on the machine that or not passworded. Like the accounts for the web or database server. Check your /etc/passwd file.
     
  6. GGJstudios macrumors Westmere

    GGJstudios

    Joined:
    May 16, 2008
    #6
    It is extremely unlikely anyone is doing this remotely.
    What is it being changed to? The default background? Is it happening after you restart? If so, this may be helpful:

    Delete the following file, then restart your Mac:
    /Users/yourusername/Library/Preferences/com.apple.desktop.plist​

    Your Library folders are hidden by default in Lion and ML. To get to your /Library or /Users/yourusername/Library (also known as the ~/Library) folders in Lion and ML:
    • Launch Finder and click Go > Go to Folder and type: /Library or ~/Library
    • Hold the Option key while clicking the Go menu item, which reveals your ~/Library folder in the menu.
    This solution has been posted in several existing threads on this topic, found by searching the forum, including these:
     
  7. murmeldjur thread starter macrumors newbie

    Joined:
    Apr 23, 2013
    #7
    But if they would have booted, I wouldn't be logged in and online on my usual account, right?

    Nothing unusual in /etc/passwd



    It changes randomly at no specific time. It changes to images taken by my colleagues.


    Screen sharing is disabled, no idea about VNC or SSH. How can I check these things for incoming connections?



    I know, because they usually change it to an image they took on my awhile ago. They have "physical" access to the machine, but it is _always_ password protected with the screensaver. Password after wake up.

    I am going to, if we aren't able to solve this. But still I want to know if they have access to it. I feels unsecure.


    It is an image taken with an iPhone 5 camera. Every time the background is changed, the image "image.jpg" are put in /users/myusername/.
     
  8. GGJstudios macrumors Westmere

    GGJstudios

    Joined:
    May 16, 2008
    #8
    Make sure yours is the only user account enabled and change your password to something long and complex. Also, you'll need to check to see if they've installed anything, since they have physical access.
     
  9. benwiggy macrumors 68020

    Joined:
    Jun 15, 2012
    #9
     

Share This Page