I was browsing through my system preferences and saw the remote login setting was toggled on under sharing. Not sure how this got checked. However now I’m concerned about if there were any connections made to my computer. Advice or thoughts?
Got a tip for us?
Let us know
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Concerns After Discovering Remote Login Setting Was Set To On
- Thread starter BananaNutOatmeal
- Start date
- Sort by reaction score
Thoughts? I think we need more information. What kind of network is your computer connected to? Private (secure)? Public (unsecured)? Have you shared the password with anyone? I’ve had this option turned on for years but I need to remote in several times day and I’m confident in my network’s security. Do you need to remotely connect to your computer? Is your network secure? Only you can provide these answers.
Seems unlikely that there is any issue.....but if you want to be safe, check Console logs for any strangeness (not the easiest thing to do, not very human friendly), uncheck remote access, and change your password.
Good time to review overall security status: Is everything patched and current? Is your firewall active? How about the status of the network you use primarily?
My computer is connected to my home network most of the time except when I have to use my school’s network for class (once a week). Haven’t shared my password with anyone and changed it to be safe. I don’t need to remotely connect to my computer and happen to find the setting turned on by chance.
I’m usually diligent in keeping things up to date. My firewall was turned on (also how I discovered I was allowing RDP connections). I might have to do some more checking in regards to my network settings.
Anything specific I need to look for in the logs?
What are the apps you use that may allow for remote logins to your system? Apps such as TeamViewer might have needed to switch that setting on. Pure speculative diagnosis on my part.
On my Catalina Beta 2 system, that setting is off. In fact, every single setting under Sharing is OFF.
Oh, and I like your username. Very tempting.
On my Catalina Beta 2 system, that setting is off. In fact, every single setting under Sharing is OFF.
Oh, and I like your username. Very tempting.
Is this your personal machine? If so, and you don't connect remotely, best to turn off. One less hole to secure.
As for checking logs....alot to wade through unless you have an idea as to how somebody might connect. Clues and examples here and here and here.
Ultimately, the most important thing is likely that the machine is secured now, and data is backed up and safe. If (a long shot) anybody got on the machine already, any damage or theft is already done...the horse has left the barn.
As for checking logs....alot to wade through unless you have an idea as to how somebody might connect. Clues and examples here and here and here.
Ultimately, the most important thing is likely that the machine is secured now, and data is backed up and safe. If (a long shot) anybody got on the machine already, any damage or theft is already done...the horse has left the barn.
I shouldn't have any apps that would need remote login. It was a surprise to see it on as all those sharing setting were previously off. I’m curious about how this could have been turned on beside me being oblivious and turning it on myself.
The "remote login" setting controls ability to login using ssh. (A command-line program.) ssh is a SECURE means of console login. (As opposed to telnet, which is an older means and not secure.)
ssh is most commonly used for console login by IT folks, system administrators, etc. It is relied-up by them for secure access to remote systems for configuration, backup, etc.
Unless your router has port forwarding enabled and routes some inbound port on your Internet connection to port 22 on your Mac, you have little to worry about. ssh would only be exposed to your local network. That is, somebody could do a console login from your Ethernet/WiFi network using the ssh command-line tool IF they know a valid login ID and password on your Mac, and IF that particular user has been permitted access to remote login from your Settings.
ssh is most commonly used for console login by IT folks, system administrators, etc. It is relied-up by them for secure access to remote systems for configuration, backup, etc.
Unless your router has port forwarding enabled and routes some inbound port on your Internet connection to port 22 on your Mac, you have little to worry about. ssh would only be exposed to your local network. That is, somebody could do a console login from your Ethernet/WiFi network using the ssh command-line tool IF they know a valid login ID and password on your Mac, and IF that particular user has been permitted access to remote login from your Settings.