14 DAY TRIAL // Mac OS X Lion apparently makes it far too easy for anyone with physical access to a computer to change an account password. Anyone savvy enough, granted. But it still sounds like a security issue to us. Read on for the full scoop.
Highlighted by one of our Twitter followers, a Cultofmac.com video demonstration on resetting (forgotten) passwords indicates that anyone who knows how to selectively boot a Mac and use the Terminal can easily reset the computer’s password and then log in using their own.
This not only poses a security issue for people who don’t want their private files and browsing history exposed (who does?), it can also render a system useless for some people with accounts on that computer.
The guide indicates that anyone with physical access to the Mac can reboot the system on their own terms.
The key point in the video that we believe shows a flaw in OS X is where the author changes the admin password without entering the old one. Any secured system prompts the user to punch in the old password before entering the new one.
Our Twitter friend Poppa1138 pointed out to this footage noting that “this a major security problem for Apple.” The comments to that very footage indicate that others are just as afraid this might pose major security concern.
“Whats stopping me from doing this to piss-off/prank my friends and family?” said a user identified as stevestruss.
“I’m totally surprised how easy it is,” wrote another. “This means that if someboby [sic] takes my laptop they will have no problem to login and do whatever they want with my personal data!!!!! this feature is really bad...”
Another commenter tried to pour some water over the fire, saying “...lets [sic] be honest the average guy isn't going to do this...”
To be clear, no one is afraid of the average guy. And while the average guy may not attempt to do this (even though anyone with two limbs can replicate the process described in the video), pretty much everyone has a computer-savvy friend.