Is this an "official" pop up from Mac OS?

[TonyC28]

I have been getting this pop up recently. It looks a little off to me. Anyone else ever see this and does it look like something that is coming from Mac OS?

 

[MandiMac]

I have been getting this pop up recently. It looks a little off to me. Anyone else ever see this and does it look like something that is coming from Mac OS?

View attachment 901201

Oh no, this is fake. Go to icloud.com or to id.apple.com and log in there if there is any notification of any sort.

 

[frou]

There's probably some kind of developer tool you can point at any UI element, and find out which app/executable it's coming from.

 

[TonyC28]

There's probably some kind of developer tool you can point at any UI element, and find out which app/executable it's coming from.

Sounds above my pay grade. It pops up every time I restart my computer. Maybe this was the nudge I needed to buy a new MacBook.

 

[Ericdjensen]

Sounds above my pay grade. It pops up every time I restart my computer. Maybe this was the nudge I needed to buy a new MacBook.

Or just get a decent antivirus/antimalware. Plenty of free ones

 

[TonyC28]

Or just get a decent antivirus/antimalware. Plenty of free ones

Yea I’m trying Norton now that was provided through Comcast.

 

[me55]

Looks like something someone built with AppleScript. It does not look genuine at all.

 

[TonyC28]

Looks like something someone built with AppleScript. It does not look genuine at all.

I wasn't sure if I was being paranoid or what, but it just doesn't look Apple at all. Their twitter support people don't seem willing to agree with me on that.

 

[chrfr]

I wasn't sure if I was being paranoid or what, but it just doesn't look Apple at all. Their twitter support people don't seem willing to agree with me on that.

I have seen this prompt from time to time. It's been around since at least Mavericks, and very likely is a legitimate prompt.

 

[TonyC28]

I have seen this prompt from time to time. It's been around since at least Mavericks, and very likely is a legitimate prompt.

I'm leaning toward it not being legit. Is it asking me to update my password for my email or for my Apple ID? The capital I in In and the lower case W in with is also inconsistent. Also no link to system preferences.

 

[vddobrev]

I can give you a file to execute and find out what process this window belongs to.
Save the below code into a file:

1. Open TextEdit
2. Copy/Paste the text below
3. From the menu select Format --> make plain text
4. Save the file, for example in Downloads/lswindows.py
5. Open Terminal and type:
cd Downloads
python lswindows.py
6. You will see a few lines listed, and a prompt "Move target window"
7. Now move the window that prompts you to sign in
8. Go back to terminal and it will have printed the details of that window.

import Quartz
import time
from Foundation import NSSet, NSMutableSet
def transformWindowData(data):
    list1 = []
    for v in data:
        if not v.valueForKey_('kCGWindowIsOnscreen'):
            continue


        row = ( \
            str(v.valueForKey_('kCGWindowOwnerPID') or '?').rjust(7) + \
            ' ' + str(v.valueForKey_('kCGWindowNumber') or '?').rjust(5) + \
            ' {' + ('' if v.valueForKey_('kCGWindowBounds') is None else \
                ( \
                    str(int(v.valueForKey_('kCGWindowBounds').valueForKey_('X')))     + ',' + \
                    str(int(v.valueForKey_('kCGWindowBounds').valueForKey_('Y')))     + ',' + \
                    str(int(v.valueForKey_('kCGWindowBounds').valueForKey_('Width'))) + ',' + \
                    str(int(v.valueForKey_('kCGWindowBounds').valueForKey_('Height'))) \
                ) \
                ).ljust(21) + \
            '}' + \
            '\t[' + ((v.valueForKey_('kCGWindowOwnerName') or '') + ']') + \
            ('' if v.valueForKey_('kCGWindowName') is None else (' ' + v.valueForKey_('kCGWindowName') or '')) \
        ).encode('utf8')
        list1.append(row)

    return list1;

def printBeautifully(dataSet):
    print 'PID'.rjust(7) + ' ' + 'WinID'.rjust(5) + '  ' + 'x,y,w,h'.ljust(21) + ' ' + '\t[Title] SubTitle'
    print '-'.rjust(7,'-') + ' ' + '-'.rjust(5,'-') + '  ' + '-'.ljust(21,'-') + ' ' + '\t-------------------------------------------'

    # print textList1
    for v in dataSet:
        print v;

#grab initial set
wl = Quartz.CGWindowListCopyWindowInfo( Quartz.kCGWindowListOptionAll, Quartz.kCGNullWindowID)
wl = sorted(wl, key=lambda k: k.valueForKey_('kCGWindowOwnerPID'))

#convert into readable format
textList1 = transformWindowData(wl);

#print everything we have on the screen
print 'all windows:'
printBeautifully(textList1)

print 'Move target window'
time.sleep(5)

#grab window data the second time
wl2 = Quartz.CGWindowListCopyWindowInfo(Quartz.kCGWindowListOptionAll, Quartz.kCGNullWindowID)
textList2 = transformWindowData(wl2)

#check the difference
w = NSMutableSet.setWithArray_(textList1)
w.minusSet_(NSSet.setWithArray_(textList2))

#print the difference
printBeautifully(w)

 

[dsemf]

The code needs to be wrapped in the keywords created by the Insert code feature (dot dot dot on the toolbar). This preserves the Python indents.

DS

 

[vddobrev]

The code needs to be wrapped in the keywords created by the Insert code feature (dot dot dot on the toolbar). This preserves the Python indents.

DS

Thanks, done it.