Concerns After Discovering Remote Login Setting Was Set To On

BananaNutOatmeal

macrumors newbie
Original poster
Jun 27, 2019
4
1
I was browsing through my system preferences and saw the remote login setting was toggled on under sharing. Not sure how this got checked. However now I’m concerned about if there were any connections made to my computer. Advice or thoughts?
 

Longkeg

macrumors 6502
Jul 18, 2014
294
107
S. Florida
Thoughts? I think we need more information. What kind of network is your computer connected to? Private (secure)? Public (unsecured)? Have you shared the password with anyone? I’ve had this option turned on for years but I need to remote in several times day and I’m confident in my network’s security. Do you need to remotely connect to your computer? Is your network secure? Only you can provide these answers.
 

hobowankenobi

macrumors 6502a
Aug 27, 2015
976
260
on the land line mr. smith.
I was browsing through my system preferences and saw the remote login setting was toggled on under sharing. Not sure how this got checked. However now I’m concerned about if there were any connections made to my computer. Advice or thoughts?
Seems unlikely that there is any issue.....but if you want to be safe, check Console logs for any strangeness (not the easiest thing to do, not very human friendly), uncheck remote access, and change your password.

Good time to review overall security status: Is everything patched and current? Is your firewall active? How about the status of the network you use primarily?
 

BananaNutOatmeal

macrumors newbie
Original poster
Jun 27, 2019
4
1
Thoughts? I think we need more information. What kind of network is your computer connected to? Private (secure)? Public (unsecured)? Have you shared the password with anyone? I’ve had this option turned on for years but I need to remote in several times day and I’m confident in my network’s security. Do you need to remotely connect to your computer? Is your network secure? Only you can provide these answers.
Thoughts? I think we need more information. What kind of network is your computer connected to? Private (secure)? Public (unsecured)? Have you shared the password with anyone? I’ve had this option turned on for years but I need to remote in several times day and I’m confident in my network’s security. Do you need to remotely connect to your computer? Is your network secure? Only you can provide these answers.
My computer is connected to my home network most of the time except when I have to use my school’s network for class (once a week). Haven’t shared my password with anyone and changed it to be safe. I don’t need to remotely connect to my computer and happen to find the setting turned on by chance.
 

BananaNutOatmeal

macrumors newbie
Original poster
Jun 27, 2019
4
1
Seems unlikely that there is any issue.....but if you want to be safe, check Console logs for any strangeness (not the easiest thing to do, not very human friendly), uncheck remote access, and change your password.

Good time to review overall security status: Is everything patched and current? Is your firewall active? How about the status of the network you use primarily?
I’m usually diligent in keeping things up to date. My firewall was turned on (also how I discovered I was allowing RDP connections). I might have to do some more checking in regards to my network settings.

Anything specific I need to look for in the logs?
 

macintoshmac

macrumors 68040
May 13, 2010
3,047
2,637
What are the apps you use that may allow for remote logins to your system? Apps such as TeamViewer might have needed to switch that setting on. Pure speculative diagnosis on my part.

On my Catalina Beta 2 system, that setting is off. In fact, every single setting under Sharing is OFF.

Oh, and I like your username. Very tempting.
 

hobowankenobi

macrumors 6502a
Aug 27, 2015
976
260
on the land line mr. smith.
Is this your personal machine? If so, and you don't connect remotely, best to turn off. One less hole to secure.

As for checking logs....alot to wade through unless you have an idea as to how somebody might connect. Clues and examples here and here and here.

Ultimately, the most important thing is likely that the machine is secured now, and data is backed up and safe. If (a long shot) anybody got on the machine already, any damage or theft is already done...the horse has left the barn.
 

BananaNutOatmeal

macrumors newbie
Original poster
Jun 27, 2019
4
1
What are the apps you use that may allow for remote logins to your system? Apps such as TeamViewer might have needed to switch that setting on. Pure speculative diagnosis on my part.

On my Catalina Beta 2 system, that setting is off. In fact, every single setting under Sharing is OFF.

Oh, and I like your username. Very tempting.
I shouldn't have any apps that would need remote login. It was a surprise to see it on as all those sharing setting were previously off. I’m curious about how this could have been turned on beside me being oblivious and turning it on myself.
 
  • Like
Reactions: macintoshmac

jtara

macrumors 68000
Mar 23, 2009
1,826
432
The "remote login" setting controls ability to login using ssh. (A command-line program.) ssh is a SECURE means of console login. (As opposed to telnet, which is an older means and not secure.)

ssh is most commonly used for console login by IT folks, system administrators, etc. It is relied-up by them for secure access to remote systems for configuration, backup, etc.

Unless your router has port forwarding enabled and routes some inbound port on your Internet connection to port 22 on your Mac, you have little to worry about. ssh would only be exposed to your local network. That is, somebody could do a console login from your Ethernet/WiFi network using the ssh command-line tool IF they know a valid login ID and password on your Mac, and IF that particular user has been permitted access to remote login from your Settings.
 
  • Like
Reactions: macintoshmac