Fix for RAM removable Open Firmware Password?

Hello people from Apple Discussions,
I have a burning question that has been tormenting me for years.
Mac OSX is branded as supposedly the safest operating system around today.
What completely astounds me though is that any user password can be quickly hacked, by booting into the Single User Mode where you immediately gain root access.
In my search for a fix I have come across semi-solutions like:
"install an open firmware password!"
I felt relieved, reassured and assumed my problem was solved.
Unfortunately this is bloody useless because one could remove a RAM module and voila! Gone is the Open Firmware Password.
What alternative (other than to permanently glue to ram module in place) is there to this security hole that exists today?
Thank you all very much for reading.
I hope this gets fixed, for the sake of all mac users.
Very Kind regards,
Luuc.

I don't believe Open Firmware passwords are stored in RAM. I believe it's an electrically programmable EAROM. Pulling a RAM module shouldn't affect the security of the computer.
You can take it to ridiculous levels. What's to stop someone from just removing the disk drives? If someone has physical access to your computer then they can get into it and see anything that's not encrypted.

Similar Messages

  • Removing open firmware password -- too easy?

    I've had an open firmware password set on my computer for the last two years to provide some protection for client data stored on it. But last night I had to do some troubleshooting using startup commands, so I wanted to temporarily remove the password. I found instructions for removing it by booting into open firmware (command-option-o-f), but this startup sequence did nothing.
    Eventually I booted from the Snow Leopard system CD and opened the Open Firmware Password utility. This utility had a simple checkbox that let me remove the password, without entering the current password. Is it really that easy to remove the open firmware password? If so, I don't think it's worth the occasional inconvenience of keeping it on there.

    There's nothing you can do to prevent a determined hacker with physical access to your machine from getting access to everything on your hard drive. What you should do, however, is make sure that any information that is sensitive is encrypted. You could use an encrypted disk image made with Disk Utility for this purpose... many do. Also, note that your keychain is encrypted and thus passwords and other things stored there are safe... but only as long as you do not auto-login with an auto-unlocking keychain or leave yourself logged in with the keychain unlocked. Although your account password could be reset by someone with the right knowledge who wanted in, this does NOT affect the keychain password.

  • Open Firmware Password for Intel MAcs

    I had used this application and password protection for my G4's. Does it work for Intel Macs?
    20" iMac Core Duo 2/ 14 iBook [1 ghz]   Mac OS X (10.4.7)  

    Yes,this support article says that Intel does support open firmware password and gives the steps to set.
    -mj
    [email protected]
    Message was edited by: macjack

  • Turn off open firmware password without OS CD, or transfer account?

    I've got the open firmware password turned on on the iBook I use for work. The laptop's CD drive recently stopped working, and I don't have access to an external CD drive. I need to bring the laptop in for repair, but want to move my account onto another iBook while this one is in the shop. Because the open firmware password is on, I can't use the migration application. Because the CD drive doesn't work, I can't use the OS CD to turn off the password.
    I do have access to an external hard drive. It would be a pain to have to reset everything on a new computer, so I'd greatly prefer to be able to transfer my account instead of just my files. Is there any way to turn off the firmware password or transfer my account using the external drive?
    Many thanks!

    Change your RAM configuration (add or remove a RAM module). Then reset the PRAM by holding down command, option, P, and R. Keep them down until you hear the third startup bong. That will defeat the firmware password protection.
    But if I read your original post correctly, you shouldn't need to bypass the OF password. Just boot up your iBook, plug the external drive into your iBook, and copy your files over. You can even use a program like SuperDuper to make an exact copy of your internal drive to your external one.

  • Any one know how to reset the open firmware password?

    iBook G4. 1.33ghz. 1GB RAM.30 or 40GB HDD. Running 10.5.8
    I got this from a friend, who got it from a friend. And its acting funny. It works. But a lot of options are missing from the System Preferences pane. And another friend said to reset the NVRAM and all the setting in the open firmware. Only no one seems to know the open firmware password. And I can't seem to find how you'd reset all the setting in the open firmware. I'm working on locating the installation disks for this iBook. But will that even help me with this resetting open firmware business?

    I did a google search and here is one link that might have some helpful information -
    http://www.macforensicslab.com/ProductsAndServices/index.php?mainpage=document_general_info&productsid=69&zenid=74f4076fb96074db45dc274f7de86bc6

  • Remove open firmware

    How do I remove open firmware? I have found out it is more of a hassel than protection.

    Just to be clear, are you asking how to remove an "Open Firmware Password"? The actual "Open Firmware" is software installed on the chips inside your computer (not on the hard drive, but on the chips on the logic board or components themselves). You can't remove the Open Firmware there. However, it is possible to turn off the Open Firmware password.
    You can find the instructions for enabling (and disabling by unchecking the option) the Open Firmware Password application in Knowledge Base Article #106482.
    -Doug
    P.S. It can be removed by force if you have physical access to the computer. I know how, but you can't post the instructions here!

  • Open Firmware Password..oops

    Today I decided to see if the startup disc on my external HD was working properly. I went to System Preferences and clicked over to the Maxtor as my prefered choice. I did not click the lock at the bottom. I then clicked Restart, everything on the desktop dismounted and the screen went dark and then came back up with the gray screen with the spinning wheel....and stayed there.
    I noticed that there was a circle with a line through it and then I noticed that my iPod was still connected, it was dismounted and charging.
    I shut off the power, to the iMac, disconnected the iPod and turned the power back on, and the gray screen with flashing folder with a question mark appeared.
    I went to the MacBook and did a search in the discussions and the only thing I could find out was that I needed to boot from the install discs, hence the oops.
    I have Undercover installed, and part of their setup is to enable the Open Firmware Password.
    How can I get my iMac up and running if I can't use the install discs or target disc mode?
    Any suggestions would be greatly appreciated.

    ddougYo, I have the Orbicule software on 5 MAcs (it nearly got one that was stolen back for me too) and also had its predecessor, Lapcop which also used the Open Firmware Password utility.
    You are not going to be able to boot up until you can get through the Firmware Password Utility and there are only two ways: the password itself, or the method that Baltwo has suggested. If the password is not working then you have possibly not entered it correctly.
    If, for some strange (unidentified) reason that is not the case, then Baltwo's solution is all you have left. Have a look at the manual: getting the iMac's RAM out should not be hard. Do you have one or two modules? If one, try putting it in the other slot.

  • HELP NEEDED URGENTLY .... please! (open firmware password vs. startup disc)

    Hi
    1. Macbook Pro 2.33 - I had Bootcamp installed.
    2. Decided to delete it... went through Bootcamp procedure
    3. Mac restarted - then came up with a flashing folder icon, meaning it couldn't find the startup drive.
    4. Forced restart again... and tried pressing ALT key to select Macintosh_HD - it asked for my OPEN FIRMWARE PASSWORD - i only ever use 1 password - I know exactly what this is, as I had turned it on/off before by going to utilities>open firmware.
    I don't want to take RAM out... is there another way? I thought if a CD was put in it could trick firmware... by pressing the space bar... though it didn't work
    I'm stumped! Anybody willing to help?
    Thanks loads in advance!
    Pixel.

    Boot from Install DVD1 holding down 'C'
    Then 'Reset Password' ?
    or ...
    1. Start up into Open Firmware by pressing and
    holding the Command-Option-O-F key combination
    during startup.
    2. At the Open Firmware prompt, type: reset-nvram
    3. Press Return.
    4. When prompted for your password, enter it and
    press the Return key.
    5. It responds OK.
    6. At the Open Firmware prompt, type: reset-all
    7. Press Return.
    This only works with PPC Macs. I have been looking for a way to do something similar with my MBP and have been unsuccessful thus far.
    Frank

  • Intel iMac, Open Firmware Password Protection and booting from CD

    I have an Intel iMac I'm setting up for use in a public library. I want to prevent single user login with the Open Firmware Password Protection utility, but if I do, how do I boot from the OS disc, zap PRAM, etc? The OFPP page has instructions on removing the OF password, but it does not work on Intel Mac's. Also, is there an alternative way to prevent single user login?

    No, you were right, I just misunderstood. Technically it's called single-user mode. But, you were right.
    Anyway,
    Since it seems that there might not be an answer directly related to your topic you could maybe give this a try.
    In Simple Finder the user can not restart or shutdown. They can only sleep and log out.
    The other problem, however, is if they log out then there are those Sleep, Restart, and Shut Down buttons on the login screen. Luckily, though they can be turned off.
    So as of now, if some is logged in in a Simple Finder account they can not restart or shut down the computer in order to get into single-user mode. They can also not get into the Administer account since it is password protected.
    The only problem I can see with this is that a person could do a hard shut down, hold the power button down until it turns off, and then boot up and enter single-user mode.
    If you want to go ahead and do this, in order to get the computer up and running in the mean time, just post back and I'll be glad to help you set up a Simple Finder account.

  • TS3554 open firmware password

    hey
    how can i reset the open firmware password? i'm using a 13" macbook pro 2011 intel core i5 running on OS X lion 10.7.5
    ps> i have already tried to remove or add ram stick and restart pressing alt+cmd+p+r nothing

    Welcome to the Apple Support Communities
    Open Firmware is only on PowerPC-based Macs, so you want to reset the EFI firmware password as you have a Intel-based Mac.
    To reset your EFI firmware password, hold Command and R keys while your Mac is starting to start in Recovery HD. Then, go to the Utilities menu, open Firmware Password Utility and disable the EFI firmware password.
    If you don't remember the EFI password, take your computer to an Apple Store

  • How can I reset the open firmware password?

    I wanted to installed Mac OS X Lion from scratch on my newly purchased MBP 15,4"
    I put the installESD.dmg on a USB pendrive, then I boot on it. I used Disk utility to erase en encrypte my drive, and at the same time I set the Open firmware password.
    I launched the installation process, after a while the computer reboot but I got an error:
    there was a problem installing mac os x try reinstalling
    I google this error and found many people who solved this issue by erasing the PRAM using the shortcut: cmd + opt + P + R. I'm asked to enter the password which I did but it's still keeping asking for the password so I guess its wrong which is weird cause I typed it in few minutes ago, so I might have done twice a typing error or I don't know.
    So my question is how can I reset this password to be able to install my OS? (I cannot access to any OS cause the installation process failed).
    Thnak you for your help

    Yes I did use the disk utility to restore the dmg on my USB drive. The USB drive is perfectly fine, I can boot on it without any problem, well before setting this open firmware password I could do it.
    Now the situation is:
    No system installed,
    Lock with a password
    I have the disk to install SL but I cannot boot on the DVD because it is asking me for this password.

  • Open Firmware Password Doesn't Work

    I've been using O.F.P. v 1.05 on both my computers for over a year. All has been well until recently. Now when I reboot holding down the option key I either get the O.F.P. screen without the password line so I can choose any bootable disk or I get the password line, but when I enter the password nothing happens and I have to reboot normally.
    Both computers running 10.4.3 with all latest updates.
    What's going on?

    Well, I just searched the Apple Support Knowledge Base and found this text here at http://docs.info.apple.com/article.html?artnum=106482. In the section "How to enable the Open Firmware Password" it says right in the first paragraph:
    1. For Mac OS X 10.1 to 10.3.9, Download and Install the Open Firmware Password application, which you can get here. For Mac OS X 10.4 or later, you must use the updated version that can be copied from the software installation disc (located at /Applications/Utilities/ on the disc).
    The link for version prior to 10.4.x leads to OFP 1.0.2, so 1.0.5 might already be the updated version that ships with Tiger. I can not check right now because I am not at home where my copy of Tiger is; maybe others can check it in the meantime.
    If you not already have done so, maybe you could try to update 10.4.x to the latest version (which is 10.4.3) and get all other available patches as well, just to make sure.
    Regards
    Jim
    AiPB 15 1,25 GHz;; iMac 17 1 GHz (flat panel)   Mac OS X (10.4.3)  
    UPDATE: And I doublechecked that I am indeed running version 1.1 (1) of OFP on my installation. I am not aware of having it updated manually, so it must either have been this all along since I installed Tiger or been updated in the procress.
    Message was edited by: Jim Knopf

  • Protect macbook with Open Firmware password

    Hi. I'd like to protect my MacBook air by enable an Open Firmware password.
    How can I do it ?

    Open Firmware was available in PowerPC-based Macs, so your MacBook Air hasn't got it. Instead, it's a EFI firmware password, that will ask you for a password every time you want to start in a mode different than the normal one (without holding any key while your Mac is starting up).
    To enable it, hold Command and R keys while your Mac is starting to start up into OS X Recovery. Then, go to Utilities menu (on the menu bar) > Firmware Password Utility, and enable it.
    Don't forget the password. Only Apple knows how to reset it, so you will have problems

  • Has Anything Replaced Open Firmware Password?

    Has Anything Replaced Open Firmware Password?

    It's a loaded question you're using in someways. If what you mean is, "Is there an Open Firmware equivalent for Intel-based Macs?" then the answer is yes. See the following Apple KB article for full details: http://support.apple.com/kb/ht1352
    ======
    YES, that's what I meant. I have a late 2010 MacBook Pro w/ Core-i7 CPU
    I read the article and I find confusing info. In one paragraph it says Intel Macs use EFI and in the following paragraph It says "Any Intel Based Mac" can use Open Firmware*
    "All Intel-based Macintosh computers support firmware password protection.
    The following Apple computers can use the Open Firmware Password application:
    ▪ iMac (Slot Loading) and later models of G3 iMac
    ▪ iMac (Flat Panel) and later models of G4 iMac
    ▪ iMac G5 and later models of G5 iMac
    ▪ iBook - all models, both G3- and G4-based
    ▪ eMac - all models
    ▪ PowerBook (FireWire)
    ▪ PowerBook G4 and later models of G4 PowerBook
    ▪ Power Mac G4 (AGP Graphics) and later models of G4 Power Mac
    ▪ Power Mac G4 Cube - all models
    ▪ Power Mac G5 and later models of G5 Power Mac
    ▪ Any Intel-based Mac*
    ▪ MacBook Air: see MacBook Air: Recovering a lost EFI firmware password"
    So do I use Open Firmware or EFI?
    "Apple make up your mind please..."

  • Zap PRAM with Open Firmware Password?

    I'm wondering if there is any way to do this...
    I have an older MacBook that had some kind of issue recently, that first prevented it from booting at all, and after resetting the SMC it would boot but the screen is black...
    I remember from many years ago that there was an issue with the screen staying black that would be fixed by zapping the pram...
    Problem is the system has an Open Firmware password.  And while I do know what that passowrd is, it's kind of impossible to go in and disble it with a black screen...
    In essense, is there any possible way I can zap the PRAM that doesn't involve psychicly guessing what I'm doing???

    I'm fully aware of the key combination.  The problem is when Open Firmware password is enabled, holding CMD-OPT-P-R has no effect....  The only way I know to be able to use the key combiantion is to disalbe the Open Firmware password first, then reboot and hold hte keys down.
    Which is where my problem lies, as I can't zap the PRAM until I disable my Open Firmware password, and I can't go though the steps to disable my Open Firmware password until after I zap the PRAM in order to re-enable my screen...

Maybe you are looking for

  • The Sound On My MacBook Pro Isn't Working

    The sound on my MacBook Pro is usually fine, but today it didn't work. For example, I tried listening to music on iTunes and watch videos but the volume wouldn't work at all. When I go to turn up the volume, it seems to turn up ok, but when I try to

  • How to Add a New CGI-Handler to Web Server?

    I need to setup a website that will have pages coded in "LiveCode" (http://livecode.com/), an English-like scripting language, that can be used as an 'easier-to-program' replacement for PHP. It has its own interpreter ("livecode-server"), which is su

  • JDBC Adapter Sender How to delete 3 tables?

    Hi all, I need to delete records of 3 tables after the Communication Channel send the information. The problem is I want to put the 3 sentences in the Update SQL Statement separated with ";" but it does not work. This is my statement DELETE from tabl

  • Html a href functionality in JLabel?

    hi, i read that JLabels are able to parse HTML. whats about an <a href> Link?

  • Failed app store update. Safari 8.0.4

    Hi all Mid 2012 Macbook Pro, running OS X Yosemite 10.10.2. I received the red number bubble last night indicating available updates within the App Store, I clicked on update all and run through the normal rigamarole of restarts etc. The iPhoto app u