OS X VS Windows (Security)

[i.shaun]

I'm curious about OS X's security (passwords n such).


Now, coming from a windows world, my experience with security was like this back in '98 or ME:

-Create Password
-Live under the impression that the password has a use
-Come home to find my brother logged in
-find out he clicked "Cancel" instead of "Log in" to bypass it


What genius created that OS? What was the point of a password at all?




Anyway, I run XP Pro now, and though I've managed to setup user accounts and an admin password, as well as a Private folder accessible only from my account, it appears that it is not so difficult to bypass it. Sure, you can't just click "cancel" this time, but apparently you can type a command into cmd.exe and it will either log in or display the administrator password.

There is also the fact that you can boot into safe mode and bypass it completely.




Is OS X (10.4+) that easy to bypass as well?


Also, on the topic of security, I use "Steel.app" to hold my passwords since I cant remember them all. To any windows users on here, either in bootcamp or on other PCs, what to you use for a PC Password manager?

 

[Tallest Skil]

Is OS X (10.4+) that easy to bypass as well

You can create an administrator account without administrator access, but you must have an OS install disk and the computer must not have a firmware password applied. Otherwise you can't.

There may be other ways to do this, but I don't know them.

 

[i.shaun]

what is a firmware password?


is that similar to the HDD password that a PC Bios can attach?


For that, it will not even go to the windows loading screen until you enter the password. Then windows loads.

 

[wiseguy27]

The firmware password is similar to the BIOS password on PCs. It locks the computer before the OS has a chance to load.

See http://support.apple.com/kb/HT1352

 

[r.j.s]

No, OS X is not full of built-in security flaws like this.

Like was mentioned above, the single user mode requires the DVD.

It would probably be easier to just remove the drive and hook it up to a different computer though.