Having security issue with SL Screen Sharing

Hello,
Maybe I am missing some new setting in Snow Leopard that increases screen sharing security, but as it is, screen sharing is now insecure on my network.
Prior to Snow Leopard I would log into my Mac from another without selecting the "remember this password in my keychain"... after finishing the session, I would again be asked for my password before ropening a new screen sharing session. All machines on the network were Leopard.
Now, with all macs on the network Snow leopard, on one of the machines I can log on in the morning, work for a while, quit screen sharing, and go back in an hour and start sharing that mac's screen with no password required. Anoyone else can can do this also! I have checked the keychain on the Mac I am viewing from and there does not seem to be an entry there for screen sharing.
On another of the Snow machines it always asks for the password, but on 2 of them, once I have started viewing another Mac's screen a password is no longer required regardless of the fact that I haven't checked that "remember password" .
This means that after I leave a Mac from screen sharing it, someone else has full access to that machine just by clicking on the Share Screen button... unless I can close the hole somehow.
Any ideas or a way to fix this would be appreciated.
Thanks
Jamy

Hi all,
I just upgraded to Snow 10.6.2 so through 2 separate updates, this security hole on all 3 Macs on my network exists.
To test it I went to an office and opened a screen on another (Snow Leopard) Mac that was set up to allow users only to connect. I then quit Screen sharing, and returned 3 hours later, only to be able to open the Hard Disk window and return to that Mac's screen without any passwords required. I was very careful not to allow the Keychain to remember me.
Since I originally posted I see another thread has begun up expressing essentially the same issue.
I would strongly advise anyone who uses Snow Leopard in a secure environment , at least through 10.6.2, to disable screen sharing or risk unauthorized access, or monitoring, of their Macs from within their networks. Screen Sharing's security settings (if they work at all) do not work on Snow Leopard the same as they worked on Leopard.
I have not found a fix for this in the 3 weeks since I first noticed it other than to disable it, or restart the Mac I started the session from, then it will ask for a password, but that is hardly an acceptable fix in some secure or corporate environments (akin to having to restart in order to empty the browser cache when accessing webMail lol)
Regards,
Jamy

Similar Messages

  • Captivate 5.5 Question: We seem to be having an issue with the screen capture piece not recording "e

    Captivate 5.5 Question: We seem to be having an issue with the screen capture piece not recording "everything".
    We're running 5.5 as an administrator on Windows 7 and my co-worker is trying to capture a webinar (GoToMeeting) with Captivate and it is not recording anything in the GTM window, except the last slide. Anyone have this problem or know a fix? Not much is mentioned in the Adobe forums.

    Captivate simply doesn't 'hear' some screen events on certain applications and you just need to resort to doing manual captures at these points.
    I usually set up my manual capture button to be F2 so that I can hit it with my left hand while my right hand is on the mouse navigating through the task.

  • Issue with finder screen sharing.

          My iOS development partner and I are currently having issues with screen sharing through the finder.  Prior to installing OSX Mavericks there was no issue with adding each other as users to each others computer, but after the install is when the problem started happening.  At the root level there are multiple users on each other's computers with our corresponding names but they don't appear in Users and Groups.  So, having phantom users on each other's computers, we took them into the Genius Bar at our local apple store.  They tried a few different methods, none of which worked, and had us reinstall the operating system and now we're back at square one having to resort to using the "permission" screen share as opposed to just being able to screen share directly though user accounts that we previously set in system preferences. I used the following console command, but it doesn't show the same accounts in the Users and Groups under System Preferences.: (dscl . list /Users | grep -v "^_") Any help or insight would be greatly appreciated.
    Currently running Software  OS X 10.9.1 (13B42) on both machines.

    Found an answer at the following link.
    https://discussions.apple.com/thread/5677786?start=0&tstart=0
    Message was edited by: Shadowchief

  • Severe Security Issue with Sharing Permissions and Windows

    I recently discovered a severe Security issue with the windows sharing an permission settings:
    I have two users, an admin user and a parental controlled user. On my mac mini, i have a external harddrive connected. On the harddrive, i have three folders, Itunes, Iphoto (Package) and a Temp Folder. I want to share the Harddrive RW for the admin, but only R for the parental user. But the Temp folder should be accessible for RW for the parental as well.
    1. I set the Drive checkbox "ignore ownership" off.
    2. I set the permissions of the drive to admin RW, parental R and Everyone to "no access"
    3. I apply to enclosed Items
    4. I set the permission of the Temp folder to admin RW, parental RW and Everyone to "no access"
    5. I apply to enclosed Items
    6. I go to "File Sharing" in the Preferences and activate SMB sharing for both users
    7. I delete all previous shares
    8. I add the Disk and use the proposed permissions which are admin RW, parental R, Everyone "no access"
    9. I add the Temp folder and use the proposed permissions which are admin RW, parental RW, Everyone "no access" - Funny, there is a new Group called "Temp" created which has custom access on both sharepoints
    10. I connect to the mac over a Windows machine (NTLM auth set appropriatly). Now I try to create a folder on the root of the Disk share, I get a denied message.
    BUT WHEN I GO INTO A SUBFOLDER (eg. ITUNES or IPHOTO), WHICH HAS ALSO JUST "R" PERMISSION FOR THE PARENTAL USER, I AM ABLE TO RW, DELETE AND DO EVERYTHING!!!
    TO RECAPITULATE: THE SHARING PERMISSIONS ARE "R", AND THE FILE PERMISSIONS IN THE RESPECTIVE FOLDERS FOR THE RESPECTIVE USER ARE ALSO JUST "R". BUT THE USER CAN DO EVERYTHING IN THE SUBFOLDERS!!!

    I recently discovered a severe Security issue with the windows sharing an permission settings:
    I have two users, an admin user and a parental controlled user. On my mac mini, i have a external harddrive connected. On the harddrive, i have three folders, Itunes, Iphoto (Package) and a Temp Folder. I want to share the Harddrive RW for the admin, but only R for the parental user. But the Temp folder should be accessible for RW for the parental as well.
    1. I set the Drive checkbox "ignore ownership" off.
    2. I set the permissions of the drive to admin RW, parental R and Everyone to "no access"
    3. I apply to enclosed Items
    4. I set the permission of the Temp folder to admin RW, parental RW and Everyone to "no access"
    5. I apply to enclosed Items
    6. I go to "File Sharing" in the Preferences and activate SMB sharing for both users
    7. I delete all previous shares
    8. I add the Disk and use the proposed permissions which are admin RW, parental R, Everyone "no access"
    9. I add the Temp folder and use the proposed permissions which are admin RW, parental RW, Everyone "no access" - Funny, there is a new Group called "Temp" created which has custom access on both sharepoints
    10. I connect to the mac over a Windows machine (NTLM auth set appropriatly). Now I try to create a folder on the root of the Disk share, I get a denied message.
    BUT WHEN I GO INTO A SUBFOLDER (eg. ITUNES or IPHOTO), WHICH HAS ALSO JUST "R" PERMISSION FOR THE PARENTAL USER, I AM ABLE TO RW, DELETE AND DO EVERYTHING!!!
    TO RECAPITULATE: THE SHARING PERMISSIONS ARE "R", AND THE FILE PERMISSIONS IN THE RESPECTIVE FOLDERS FOR THE RESPECTIVE USER ARE ALSO JUST "R". BUT THE USER CAN DO EVERYTHING IN THE SUBFOLDERS!!!

  • How can I recover an old/disused iCloud account. I was having some issues with my apple id so I restored my iPad, I am now stuck on the activation screen as I no longer use the iCloud account i used to set up the iPad and can't remember the address or pas

    How can I recover an old/disused iCloud account. I was having some issues with my apple id so I restored my iPad, I am now stuck on the activation screen as I no longer use the iCloud account i used to set up the iPad and can't remember the address or pas

    I have the same problem - it is maddening. I rely on this iPad for work so this is not just an annoyance! The above solutions of changing the appleid on the device or on the website do not work.
    The old email address no longer exists - I haven't used it in a year probably and I no longer have the account.  I logged into the appleid website and there is no trace of the old email address so there is nothing that can be deleted or changed there.  On the iPad there is no trace of the old email address so nothing can be deleted there either. I have updated the iPad software and the same problem comes right back.  Every 2 seconds I am asked to log in using the old non-existent email.  The device is currently useless.
    The only recent change to anything was the addition of an Apple TV device, which was set up using the correct login and password.
    Does anyone have any ideas? The iPad has been backed up to the iCloud so presumably it now won't recognize the current iCloud account? So restoring may notbe an option?

  • I've been having an issue with assistive touch, every time I open an app. the AT disappears the from the screen and I have to turn it off and ON again. Is there a way to fix this?

    I've been having an issue with assistive touch, every time I open an app. the AT disappears the from the screen and I have to turn it off and ON again. Is there a way to fix this?

    Try:
    - Reset the iOS device. Nothing will be lost
    Reset iOS device: Hold down the On/Off button and the Home button at the same time for at
    least ten seconds, until the Apple logo appears.
    - Reset all settings      
    Go to Settings > General > Reset and tap Reset All Settings.
    All your preferences and settings are reset. Information (such as contacts and calendars) and media (such as songs and videos) aren’t affected.
    - Restore from backup. See:                                 
    iOS: How to back up           
    - Restore to factory settings/new iOS device.

  • I am having strange issue with my apple tv...i set up pictures to scroll through to the tv using home sharing.  Now album covers are interspersed with my pictures.  I have been using apple tv for a while and never had this happen before

    I am having strange issue with my apple tv...i set up pictures to scroll through to the tv using home sharing.  Now album covers are interspersed with my pictures.  I have been using apple tv for a while and never had this happen before

    Are you watching this content though iCloud or though from iTunes on your local computer?  If it is from iCloud have you tried downloading the content to iTunes and watching it on ATV from that source to see if it still happens?  This is geerally a much more reliable way to view the content.  Easer to fast forward and rewind too.
    - I have a stable internet connection
    Clearlly you don't
    >(Ive tested on other devices)
    Which does not tell you anything about the specific connnection from ATV to iCloud.
    >I am able to stream Netflix problem free from my AppleTV without so much as a hicup
    Again which does not tell you anything about the specific connnection from ATV to iCloud.
    >- I am able to download the episodes to my phone, ipad, and computer without any issues
    Again which does not tell you anything about the specific connnection from ATV to iCloud.  It does remove your ISP throattly traffice as a possible cause though.  So that is good.
    Have you checked your wireless rounter?  Tried doing the factory restor on it?  Upgrading it's firmware?  Is it and or ATV getting extreamly hot when this problme happens?

  • Is anyone having Mic issues with iPhone 5?

    Is anyone having Mic issues with iPhone 5? Speakerphone works but not the mic, on phone calls and memos.
    Took it to local Genius campus and after taking off the back screen and case, they blew air into the mica and it worked for about 20 mins.
    I can't have a ready can of air around every time the mic goes out.
    Anyone else had similar issues?

    I am having a similar problem. I had the iPhone 5 delivered yesterday. On most of the calls I tried, the person on the other end could hear me just fine on speakerphone, but not on the regular mic. It was garbled, or I would cut in and out. I could always hear the other person clearly.
    I just got back from a Genius Bar appointment where they gave me an entirely new phone. The issue exists on this one also, though now it seems like the audio is more muffled than garbled or spotty. Again, speakerphone works, and I can hear the other person clearly.
    I had originally restored backup from my 3GS, but before I went to the Genius Bar I restored to factory settings just to be sure it wasn't a software issue (it wasn't, apparently). I did not restore from the old phone for this new handset either.
    Thanks for any suggestions...frustrating, for sure!

  • Has anyone having an issue with the iphone 6 signal cell strength on Verizon?

    Is anyone having an issue with the iPhone 6 signal on Verizon?

    I'm having the same issue as most of you on this forum. my current OS is 4.3.5 and after a factory reset, the camera started working fine, however, once i done the restore the camera reverted back to the same issue - "the shutter on the screen wont open, and the still/video switch just flashes" - what is more strange is, i have the HP home&biz app installed and this has a camera function and the camera seems to work fine with that, therefore suggesting there is nothing wrong with the hardware and this is a software issue. I'm currently awaiting a member of the Apple support team to call me about this, will keep you posted. BTW - someone suggested, going into Location Services and switching off the camera and apparantly, the issue was resolved for them, unfortunatly, this didn't work for me extremly odd issue indeed!

  • Issue with blank screen HP G60-447CL Notebook PC

    Issue with blank screen  HP G60-447CL Notebook PC, I purchased warranty and have had the laptop serviced before for the same exact issue.  Same problem has come up again blank screen it has been less than five months this problem was fixed and it has started again:  blank screen white, laptop is powered on nothing else happens.  Now I cannot reach anyone.

    You're very welcome.
    I have tried many times to help folks with different drivers and nothing has worked.
    I'd say at least a dozen people have posted about this issue, and no one can fix it.
    I don't understand it either.

  • Hi. I am having an issue with music on my Ipod. It would probably be easier to explain my specific issue: I have songs by Band of Horses from Cease to Begin. When viewing my albums through cover flow, it shows Cease To Begin as two separate albums, one wi

    Hi. I am having an issue with music on my IPod. It would probably be easier to explain my specific issue: I have songs by Band of Horses from Cease to Begin. When viewing my albums through cover flow, it shows Cease To Begin as two separate albums, one with only Islands on the Coast, and the other having Islands on the Coast with 3 other songs. If I delete the album with only one song from my IPod, it deletes the song from the other "album" as well. If I go to "All Songs" by Band of Horses, it only shows one Islands on the Coast, so it is not a duplicate issue. Also, in Itunes, it only shows one album. I just recently updated to iOS5 on my 4th Gen IPod Touch, if that helps.

        Hello APVzW, we absolutely want the best path to resolution. My apologies for multiple attempts of replacing the device. We'd like to verify the order information and see if we can locate the tracking number. Please send a direct message with the order number so we can dive deeper. Here's steps to send a direct message: http://vz.to/1b8XnPy We look forward to hearing from you soon.
    WiltonA_VZW
    VZW Support
    Follow us on twitter @VZWSupport

  • I am having a issue with getting data useage alerts for my iphone 4s

    I am having a issue with getting data useage alerts for my iphone 4s from AT&T.  I do not download anything huge at all.
    I looked into it and figured out that the phone dials out nightly at 12:29am every night.   I went into my settings and went to general..about..diagnostics and useage..then diagnostics and useage data to see this.  I then clicked don't send...but I am still getting useage alerts.  Can anyone help me please...
    Thanks

    Honestly, from reading the thread linked, they all come off as a bunch of whiney people that cannot be bothered to help themselves.
    Little to nothing in that thread indicates an issue beyond inept consumers.  Yes, I read several pages on the incessant gripes.  Very few made any actual attempts to troubleshoot issues before whining about the "Apple issue" and those that did actual troubleshooting got their issues resolved.
    So no, Apple has nothing to fix beyond a few specific devices that are experiencing hardware issues.
    If you have actually put forth effort and done the basic troubleshooting, take the device to Apple for evaluation and possible replacement.  Whining will get nothing accomplished.

  • I am having major issues with links in keynote! Even though the links (a navigation system) are on the master page, they are only working on some of my slides. Anyone have ideas on how to fix this or similar issues? Help!

    I am having major issues with links in keynote! Even though the links (a navigation system) are on the master page, they are only working on some of my slides. Anyone have ideas on how to fix this or similar issues? Help!
    I have created a navigation system on the master pages and set the presentation to links only mode. I also have other links scattered throughout the program, like a linkable table of contents, etc. Some of them work, some of them don't. Not sure why. Anyone out there having similar issues? Or have any idea on how I can solve this issue? Any help would be appreciated!
    Thanks!

    Links should not create any problems in Keynote.  If they are set up correctly on text, the text will be underlined. Objects that have links will have a curved arrow bottom right, if you click the arrow a popup will display the link information.
    Try this repair for Keynote,  ensure you complete all the tasks and in the order shown:

    delete all the iWork applications if you have them, not just Keynote, using Appcleaner from Mac Update, its a freeware application

    empty the trash:  Finder > Empty Trash

    Shut down your Mac, wait 30 seconds, then power on the Mac, immediately after the start chime, hold down the Shift key
    When you see the grey Apple symbol and progress indicator (a spinning gear), release the Shift key.
    If you are prompted to log in, type your password, then hold down the Shift key again as you click Log in.
    4  
    Let the Mac fully boot up, it will take longer as the OS is repairing the drive

    when fully booted, go to Applications > Utilities > Disc Utility; click on the boot drive then First Aid tab and click  repair disc permissions

    when complete, restart the Mac normally, Apple menu > Restart

    install Keynote from the Mac App Store
    let us know if this helped

  • Hi, i am having an issue with a basic motion scroll effect.  I already watched and read every tutorial out there regarding this topic and even tried the adobe chat support, but the guy on the other end of the line disconnected me-, probably he didn't unde

    Hi, i am having an issue with a basic motion scroll effect.
    I already watched and read every tutorial out there regarding this topic and even tried the adobe chat support, but the guy on the other end of the line disconnected me…, probably he didn't understand what i wanted from him because english is not my native language, so a will try to be very, very clear about this one..
    please note, that i am new to muse, this is my first project ever.
    my idea is as following:
    when the customer comes to our companies site, he just sees our logo on a white Background. the logo consists of, say, four elements. when the customer scrolls down, the logo starts to disassamble: first the first part of the logo flies out the left side of the site, then the second part of the logo vanishes down, then the third part of the logo flies to the right, then the fourth part of the logo flies to the top and out of the customers view. given what i have seen, it is possible to do that….
    so…..
    now i have the four parts of my logo imported as png files into muse and assembled them in design view to build our companies logo. I select every one of the four parts and go into the scroll effects tab left beside the layers tab. first i enter the same values for every one of the four parts: initial motion: 0x and 0x again for the left and right motion; key position ( t-handle) : 0px; final motion: 0x and 0x again for the left and right value.
    now i hit "preview".: the logo is "pinned" at the correct position, i can scroll but the logo stays where it is. so far so good….
    now i select all the four elements again and go to the scroll effecs tab. at "final motion", i click the down arrows and enter 1x. I hit Preview…
    when i am scrolling down the WHOLE logo goes down…. so far so good.
    NOW i want the first part of the logo to go down, THEN the second part to go left, THEN the third part to go up, THEN the fourth part to go right.
    so i select ONLY the first part, go to the scroll motion tab, at "final motion" i click the left arrows, then i enter 1x.( the up-down value, i set to 0 again).. i hit Preview…
    the first part of the logo goes left as soon as i start scrolling, the other three parts still go down at the same time…
    NOW i want the second part of the logo to start moving, when the first part has left the scene, not at the same time as the first part.
    SO I SELECT THE SECOND PART AND DRAG ITS T-HANDLE (KEY POSITION) DOWN TO, LETS SAY, 200PX. SO IT STARTS MOVING ONLY AFTER THE CUSTOMER HAS REACHED THAT POINT, RIGHT?
    BUT WHEN I PREVIEW THAT ****, THE LOGO IS NOT TOGETHER ANYMORE, THE SECOND PART IS FLOATING ANYWHERE ELSE BUT WHERE IT SHOULD BE…..WTFF????
    short: when i move the t handle, the initial position of the object changes. thats what i said to the adobe employee, but he said, that thats the expected behavior….
    but if thats so, how can i have my four parts correctly together, so they form my logo, but with different t handles, so that they all start to move at different times??
    Pleeease help me, i am dying of frustration here…..:( that behavior cant be right, right?
    Thanks so much to everyone who actually reads this post and tries to help…….
    All the best,
    Niki Lapan

    Thank you so much for helping,
    But i really wonder how you did that. did you always switch between design view and preview view, then change the key position for 2px then switch back, to align the four letters? because i imagine that can get really frustrating, if you have a logo consisting of 58 parts instead of 4!:)
    Anyway thank you very much for your time and effort!!!!

  • We run an iMac 3.4 GHz I7 for our church worship service; we haven't upgraded to Mavericks because we heard about issues with multiple screens crashing.  Has this issue been resolved?  Thank you!

    We run an iMac 3.4 GHz I7 in our church worship service; we have front screens and a stage display monitor ; we haven't upgraded to Mavericks because we heard about issues with multiple screens crashing.  Has this issue been resolved?  Now that we are 2 upgrades behind, I'm getting little concerned.  Thank you!

    Oh, well that was a whole other kettle of fish:
    Oh the G4 I attempted to install iLife '08 before Lepoard was available. About the only thing that installed cleanly was iPhoto. I ended up reinstalling everything back to iLife '06, and then upgrading back to the current stable version of the iLife '06 version. I didn't attempt a reinstall until after I upgraded to Leopard.
    When I did reinstall, I made a iLife '06 folder, copied all iLife apps into it, and upgraded. Seemed to work, except for the part where iMovie gets left behind and iDVD is only mostly functional.
    When I installed on the other 2 machines, it was after installing Leopard and all upgrades. On those 2 machines, I didn't bother with the copy, I just moved everything to the iLife '06 folder I created, and did a fresh install.
    I didn't have to do anything with the iPhoto Libraries, that I can recall.
    I always do an upgrade, never an archive and install. I've never had a problem with this back to 10.1 or 10.2.

Maybe you are looking for

  • I reset my computer and have lost all my Itune music

    Can I get my Itunes stuff back after a clean reset of my computer ?

  • Problem connecting RMI-Server using a servlet

    Hi All.. I have a RMI-client server model woring fine in AIX box.I am currently in a need to create one web client(may be with servlet or JSP). I wrote a sample servlet which try to connect to the RMI server. But when I run the servlet Its simply try

  • Undo view hidden folders & files

    hi i had a problem where i was downloading to an external hard drive called storage. i downloaded a file with out the hard drive on so mac put this file on the mac hard drive in a folder called storage, but it has hidden. i googled how to view hidden

  • ORA-03135: connection lost contact Error

    Hi, My Application access data from Oracle 10g. Applications hangs when update/delete a specific row in a table. After few minutes application terminates with ORA-03135 error. Rest of application works fine which access around 150+ tables. If i conne

  • Java Book - Recommendations Needed.

    Recommendations for a good BEGINNERS book please.