OSX Account Security Question

Discussion in 'macOS' started by timnosenzo, Jul 17, 2007.

  1. timnosenzo macrumors 6502a

    timnosenzo

    Joined:
    Jun 21, 2004
    Location:
    ct, us
    #1
    Quick question... I am going to be leaving my MacBook with my local Apple store for a few days while it gets some warranty work done. Instead of giving them my account password (and essentially giving them the keys to my life), I thought it would make sense to create a guest account with admin access and leave them with that.

    So if I just give them access to the guest account, is there anyway for them to still able able to access my account? I know they could reset my password (at least I would know that they did that)--is there anyway for me to block that level of control for them?

    FWIW, I'm just having the screen replaced, so they shouldn't have to be messing around with the OS much.

    Thanks for the help!
    Tim
     
  2. /dev/toaster macrumors 68020

    /dev/toaster

    Joined:
    Feb 23, 2006
    Location:
    San Francisco, CA
    #2
    Thats how I would handle it, nobody ... and I mean, nobody gets my account passwords.
     
  3. XheartcoreboyX macrumors 6502a

    XheartcoreboyX

    Joined:
    Jul 3, 2007
    #3
    Why dont you just politely tell them not to see or mess with your files cause they are very personal??!!

    im so sure they would take your word.
     
  4. MisterMe macrumors G4

    MisterMe

    Joined:
    Jul 17, 2002
    Location:
    USA
    #4
    Creating a guest account for the technician is a complete and total waste of time. If he wants to steal your "life," then all he has to do is to use a System Restore disk for your model computer to change your password to anything he wants or remove it all together:rolleyes:
     
  5. bankshot macrumors 65816

    bankshot

    Joined:
    Jan 23, 2003
    Location:
    Southern California
    #5
    Yes, unless you used FileVault. If they have admin access (and I believe they do ask for it), they can access everything that isn't encrypted.

    If it's very important to you, you have two choices:

    1. Make a complete backup and wipe your account off the machine entirely. I've done this in the past when sending computers in for repair.

    2. Use FileVault.
     
  6. kolax macrumors G3

    Joined:
    Mar 20, 2007
    #6
    I'd make a Guest account with limited access - what else do they need to do when they replace the screen? Change resolution, maybe run a test program but they won't need anything else.

    Haha - no chance. I've dealt with computers that have been returned by customers and been amazed that they didn't even bother to delete their data.

    Don't trust anybody with your stuff. That's as stupid as writing your name and address on a suitcase incase it gets lost - giving baggage handlers at the Airport a possible empty home to rob. Not paranoia, just being wise.
     
  7. MisterMe macrumors G4

    MisterMe

    Joined:
    Jul 17, 2002
    Location:
    USA
    #7
    If you routinely take your computer to the shop while it is user-accessible and have the time to establish new accounts, then fine. However, most people take their compuers in for repairs when they are broken. In that event, deleting files may not be an option.
     
  8. kolax macrumors G3

    Joined:
    Mar 20, 2007
    #8
    Where did I mention deleting files exactly...?

    I was promoting the use of a Guest account (as stated by a previous poster). But might be an idea to make a Guest account right now incase it is required in the future..;)
     
  9. xUKHCx Administrator emeritus

    xUKHCx

    Joined:
    Jan 15, 2006
    Location:
    The Kop
    #9
    They always ask for an admin account which means they can quick and very easily get into your files just by changing permissions of your home directory.

    You would have no idea that they did that because they could easily revert the permissions back.

    It is really a trivial task for anyone let alone an apple "genius".

    I put all my files in an encrypted disk image which has a separate and very strong password.

    And of course back it up before hand. They could easily lose all of your data. Don't learn the hard way.
     
  10. timnosenzo thread starter macrumors 6502a

    timnosenzo

    Joined:
    Jun 21, 2004
    Location:
    ct, us
    #10
    Thanks for the replies, all. xUKHCx is right... with admin access I can just change the privileges on another users folder and look through it. Forgot about that..

    FileVault requires a TON of disc space though, right? My home folder is 67 GB's, and I only have 12 GB's or so free on my HD. If I recall correctly, I can't activate FileVault, right?

    Thanks
    Tim
     
  11. xUKHCx Administrator emeritus

    xUKHCx

    Joined:
    Jan 15, 2006
    Location:
    The Kop
    #11
    From all accounts Filevault is way too much trouble and dangerous that I would never advise going down that route. Just create some encrypted disk images to dump your files into and then you can move them back out once it has come back. I've said it before but will say it again, backup for files before sending it in, even though they are replacing the screen they could reinstall/drop your laptop and your data is definitly worth the cost of a couple dvds or 15.
     

Share This Page