Author Topic: Question About Security  (Read 4775 times)

Offline Bruce_F

  • TS Addict
  • *****
  • Posts: 1432
    • View Profile
Question About Security
« on: June 28, 2010, 11:42:05 PM »
I had my MBPro set up to require a password to use it whether it was started up, awakened from sleep or changing users. It was stolen yesterday while my wife and I were away from the house for a few hours. angry.gif

Can I be fairly confident that nobody will be able to get to the information on the computer? dntknw.gif

Thanks for any comments...

-Bruce-

Offline Paddy

  • Administrator
  • TS Addict
  • *****
  • Posts: 13797
    • View Profile
    • https://www.paddyduncan.com
Question About Security
« Reply #1 on: June 28, 2010, 11:50:38 PM »
Um...unfortunately, your info is not safe if the person who stole the MBP has any knowledge of Macs and access to a startup disk, which is all he needs to change the password.

http://support.apple.com/kb/HT1274

I would immediately change ALL passwords for anything that you do online that may have a PW stored in the Keychain. Bank accounts etc. are usually ok, as they require you to enter your password every time you visit the bank site.

What sort of info are you afraid the thief might get? If you can let us know that, we can better figure out what needs to be done to prevent any collateral damage.

I'm so sorry to hear that this happened, Bruce! sad.gif

BTW - this prompted me to think about what info I have on my Mac that could cause serious problems if lost, and I realized that I have tax returns for the past 7 years for both the US and Canada. Considering they contain just about everything needed for an identity thief, I have now encrypted them all. The more recent, I encrypted in Acrobat so that the individual forms are easily found, and the older ones I just bunged into a folder and then made an encrypted disk image which requires a password (NOT saved in the Keychain!) to open. Should do the trick. This info won't be on my MBP, but I will have an external HD with me that will have a clone of my Mac Pro when I head to the US for 2 weeks in a couple of days. Of course, I could just chuck the tax folders entirely off the external - I'll certainly have no need of them when I'm traveling. tongue.gif

I think that the tax returns are the only documents with that sort of info on my Mac....
« Last Edit: June 29, 2010, 08:37:32 PM by kbeartx »
"If computers get too powerful, we can organize them into committees. That'll do them in." ~Author unknown •iMac 5K, 27" 3.6Ghz i9 (2019) • 16" M1 MBP(2021) • 9.7" iPad Pro • iPhone 13

Offline krissel

  • Administrator
  • TS Addict
  • *****
  • Posts: 14735
    • View Profile
Question About Security
« Reply #2 on: June 29, 2010, 03:09:43 AM »
Actually the thief will not have access to your login keychain because its password is not changed when a new login password is created via a Startup Disk CD/DVD.  He would have to know the original keychain password, which is usually the login password you created when the MBP was new.

http://support.apple.com/kb/HT1631


A Techsurvivors founder

Offline Paddy

  • Administrator
  • TS Addict
  • *****
  • Posts: 13797
    • View Profile
    • https://www.paddyduncan.com
Question About Security
« Reply #3 on: June 29, 2010, 08:56:25 AM »
Good point, Kris. Hadn't thought about that. Of course, OTHER things may be more sensitive - like documents with personal info that identity thieves could use (like tax forms). I suspect that the attraction was the MBP itself, not its data, and if Bruce is lucky, the thief will simply wipe the drive - either so he can use it himself or much more likely, sell it. Of course, that again demands a certain knowledge of Macs and access to a startup disk, and if he has that, then who knows. One thing is for certain - anyone trying to sell a Macbook Pro to an innocent buyer is going to have a hard time explaining why he can't start it up and get past the password protection, so something will have to be done. My guess is that unless this is some rank amateur thief, he'll have fenced it to someone else who will then deal with it. But these are all guesses. What have the police said about it? (who they suspect etc. - ie: was it a "professional" job or a teenage smash and grab sort of job?)

Bruce, start keeping an eye on Craigslist and Kijiji in the Portland/Vancouver area. You never know....I've heard of people finding their own laptops that way. The police certainly don't go out of their way to find 'em. In Toronto, there was a recent case where a couple had an expensive jogging stroller stolen off their front porch and within 36 hours saw it listed on Craigslist. The man took another (male) friend and arranged to meet the seller, confirmed that the stroller was indeed his (his son had made chalk marks on it - it was easy to identify), confronted the seller and took it back. The seller was then tracked down by the police and arrested - and had been doing this for some time, apparently. I'm assuming that you have the serial number and so on?

BTW - did they get the whole thing - power supply etc., laptop bag, any disks (OS disks?) or just the laptop itself? This might help identify it if the thief does happen to list it on Craigslist - especially if the listing says anything like "no power supply" etc., or seems to be going for a too-good-to-be-true price. If you do think you find it, take someone else with you to help recover it and be really careful...(all the usual precautions - meet in a public place like a bank or well-populated coffee shop, ask to start up the Mac, and for sure check the serial number in system profiler!!)
"If computers get too powerful, we can organize them into committees. That'll do them in." ~Author unknown •iMac 5K, 27" 3.6Ghz i9 (2019) • 16" M1 MBP(2021) • 9.7" iPad Pro • iPhone 13

Offline Bruce_F

  • TS Addict
  • *****
  • Posts: 1432
    • View Profile
Question About Security
« Reply #4 on: June 29, 2010, 10:28:58 AM »
Thank you for the replies!

The thief got just the computer. The power cord was right there but it wasn't taken. What he did take was the power cord for my iPhone! Fortunately, my son had an extra cord to give me.

I called Apple about the burglary and they told me they will track any computer that is brought to an Apple store, if and only if the police call in a stolen computer report. I asked why they can't take my word for it and she just said it's Apple policy.
-Bruce-

Offline Texas Mac Man

  • TS Addict
  • *****
  • Posts: 1722
    • View Profile
    • http://
Question About Security
« Reply #5 on: June 29, 2010, 03:23:43 PM »
You can set up another level of security on you Mac, especially laptops, by using an Open Firmware Password http://support.apple.com/kb/ht1352 This password can't be reset using the install CD/DVD.
Cheers, Tom

Mac PRAM, NVRAM, CUDA/PMU & Battery Tutorial
https://sites.google.com/site/macpram/mac-p...attery-tutorial

Offline Xairbusdriver

  • Administrator
  • TS Addict
  • *****
  • Posts: 26388
  • 27" iMac (mid-17), Big Sur, Mac mini, Catalina
    • View Profile
    • Mid-South Weather
Question About Security
« Reply #6 on: June 29, 2010, 05:07:18 PM »
I think Apple wants a police report to avoid being caught in the middle of any kind of dispute between a buyer and seller. Making a false report to the police is usually a misdemeanor, at least and not something most crooks would do...they generally try to avoid police. Thinking.gif In any case, make a police report (and get copies!) ASAP, even insurance companies like to see those...

I sure hope you get some clues from the usual local used goods outlets. Are there any pawn shops that specialize or even offer computers? Unfortunately, the thing may just get dumped into the trash when the drug dealer, who took it as payment, finds out it's not as valuable without the password(s), power supply, etc. Then, the thief may have more trouble than he bargained for... scram.gif
THERE ARE TWO TYPES OF COUNTRIES
Those that use metric = #1 Measurement system
And the United States = The Banana system
CAUTION! Childhood vaccinations cause adults! :yes:

Offline dolphin

  • TS Addict
  • *****
  • Posts: 2769
    • View Profile
    • http://dolphin13.com/designsbyroy/
Question About Security
« Reply #7 on: July 01, 2010, 07:00:23 AM »
Sorry to hear about your loss Bruce. Can't help your current situation. You might try this in the future if you recover your MBP or replace it.

Back to my mac
"If it aint broke; don't fixit"
Roy