Major Security Fail since OSX Update - Password Request from Screensaver & Sleep Mode

Like me, I'm sure you walk away from your Mac with the knowledge that your computer is safe from prying eyes once the screensaver or sleep mode activates.
Not anymore..!
Since the recent 10.10.3 OSX update to fix a hidden backdoor API security issue, Apple have unknowingly left users wide open with an error in System Preferences' Security & Privacy.
It is recommended that users shut down their machine and not rely on screensaver and sleep mode security.
The password request does NOT work...
Well done, Apple.

My Macs all ask for passwords still, however none of them will automatically start the screensaver anymore. I have to manually start the screensaver using hot corners.
I would have believed it to be an issue with a 3rd party application or a specific configuration, except all FOUR of my Macs started doing this the moment I loaded 10.10.3.
The other oddity is, if I sit and watch my macs with the screensaver running, periodically the password prompt / login window appears like someone moved the mouse or pressed a key (except no one did).
I have tried resetting to different screensavers, resetting the timeout for the screensaver to something different....and of course, turning it off and on again.
Sure hope Apple fixes this soon.
Systems:
iMac (27-inch, Late 2013)
10.10.3 (14D136)
3.5 GHz Intel Core i7
32 GB 1600 MHz DDR3
iMac (27-inch, Late 2012)
10.10.3 (14D136)
3.4 GHz Intel Core i7
32 GB 1600 MHz DDR3
MacBook Pro (13-inch, Mid 2012)
10.10.3 (14D136)
2.9 GHz Intel Core i7
8 GB 1600 MHz DDR3
Mac mini Server (Mid 2011)
10.10.3 (14D131)
2 GHz Intel Core i7
16 GB 1600 MHz DDR3
NOTE: The issue seems to not be consistent on this system.

Similar Messages

Sending email in one account, triggers a password request from another

I have several email accounts operating in MAIL. I have recently noticed that when I send an email in one account, a second account pops up and requests a password. I used to type in the password, but then I thought: has a nasty virus infected my system and somehow, whenever I send emails, they are also secretly being sent somewhere else via this second password-seeking account.
There is nothing in the Outbox for the second account, so I'd like to find out what is going on. Is this an indication of a virus, or has MAIL gone haywire?
I can get around the problem by clicking OK to the password request from the second account (but not having typed anything in), which sends me to a window asking me if I want to use another account to send the email. I select the first account (the one I actually want to use), it asks me for the password, and away it goes.
Thanks in advance for any comments.
Guy Burns

Guy,
You need to provide us with some additional info about the SMTP you are using as the Outgoing Server for each account, and what, if any, relationship that SMTP has to both accounts. The use of the SMTP provided by your ISP, for example, if Authenticated either by Password or by SMTP after POP3 methods, can trigger a password prompt that looks the same as that for the Incoming server of an account provided by that ISP.
More info, please.
Ernie

Backup failed since Mavericks update

What do I do to make my Time Capsule work since I updated to Maverick. It says backup Failed because the Time Capsule is already in use.

Time Machine Troubleshooting
http://pondini.org/TM/Troubleshooting.html
C12: "The Backup disk image ... sparsebundle ... is already in use."

Major phone issues since last update

My Droid Charge downloaded the last software update and ever since it started bugging out. I called Verizon and they sent me a replacement, which bugged out worse than the first one. I went to call Verizon but the phone was acting up so bad that it froze to the point where I would do a battery pull and it still didn't work. I had to walk to the Verizon store because my phone wouldn't make calls or text for over 7 hours. They ordered me a third phone which has the same problems. All new SIM cards every time and everything. These are just some of the issues I've been having across all three phones. PLEASE HELP!
1) When entering text (text message, email, etc.), the T9 will give me suggestions, but there is no text being entered into the text box and I have to restart the phone for it to work again.
2) The phone force closes applications that I haven't even opened. I will restart the phone or do a battery pull and as soon as I unlock the phone, I am greeted by at least two apps that have been force closed. (I put the phone in Safe Mode to see if it helps. It actually force closed applications more frequently)
3) I will try to unlock the phone and the screen will lock up and will need a battery pull to fix it.
4) If I stay in the same place and only wake the phone up from sleep mode without actually running any applications, the phone will go from 4G to 3G to not even being connected, all within about an hour.
5) Since the update, I have had HUGE data usage spikes in my bill. I went from an average of 2 gigs a month to 9 gigs of data the month after the update and 7.5 the month after.
6) I will go into my contacts to make a call and when I click on the number of the contact I would like to call, the phone is unresponsive and doesn't call.
7) The phone will randomly log me out of my email accounts and I miss important emails for work. This only recently started happening.
8) The phone alerts me of several missed calls without ever actually ringing. (I know I just didn't hear it because the phone is usually on the desk in front of me and I'll wake it up to check the time and next thing I know, I have 6 missed calls)
9) If the phone actually does start ringing from an incoming phone call, when I go to answer the call, the phone freezes a lot and won't actually answer the call, but it continues ringing.

Since the posting, I received a third replacement for my phone. So far it is the best working phone out of all of them. It occasionally freezes up and I have to do a battery pull to get it stable again. I'm just quite unhappy because I didn't really even want the phone to begin with. Verizon called me and said they wanted to give me the early upgrade last year so I was like fine, but it has been a nightmare. Then I am approved for an early upgrade by two different managers from call centers and am told that they need to call me back to do the order, but I never get called back. When I call back, I get diverted and the new person on the phone ends up just wanting to send me a replacement Droid Charge. Then I finally get someone who will give me the upgrade, but then am surprised to find out that by upgrading, I will no longer be able to keep my current contract.
I have been a Verizon customer for one hell of a long time and have never had an issue until this past month, and am exhausted from having to make so many calls to Verizon. If nothing is resolved with my account by the end of my contract period, I am going to someone else.

Since last update XP keeps "going to sleep" when unsed for 10 min.

If I walk away for 10 minutes the computer screen says "going to sleep" The Tower shows green light next to on/off switch but orange light is off. Press start, orange light fires up and I must wait for the whole restart process again. Where do I set the time-out to stay on?

Resetting SMC doesn't work
Apple is dying
After 10.9.5 update,
1. Go to sleep
2. Wake up from sleep
3. After step 2, macbook keeps going to sleep per 5 to 20 seconds
4. After restart, back to normal
1 > 2 > 3 > 4 > 1 > 2 > 3 > 4 >...

Update 10.4.6 and sleep mode

This afternoon I updated to the latest version of OS X and since that point, my PowerBook doesn't go to sleep when I close it. That's right - the display is on with the lid completely closed. It never used to function like this (that is, the computer would automatically go into sleep mode when I would close the lid). Has any one else had something like this happen? Any suggestions?
Thanks in advance!
PowerBook G4 Mac OS X (10.4.5)

Wow - I feel stupid! That was a simple (and obvious) thing to do. Unfortunately, my display remains lit up when I close it, so I'm not sure where to go from here.
Glad it worked for you. Thanks so much for the help.
PowerBook G4 Mac OS X (10.4.2)

Screensaver / sleep mode password protection does not work

Hello,
I am running 10.6.4 and have enabled screen saver and sleep mode password protection from System Preferences / Security / General / Require password immediately after sleep or screen saver begins.
I have also selected some screen saver - Cosmos. Now, from terminal when I check the settings:
MINE:~ ent$ defaults -currentHost read com.apple.screensaver
CleanExit = YES;
PrefsVersion = 100;
mainScreenOnly = 0;
moduleDict = {
iLifeMediaGroupType = 0;
moduleName = Cosmos;
path = "/System/Library/Screen Savers/Cosmos.slideSaver";
type = 4;
showClock = 1;
tokenRemovalAction = 0;
MINE:~ ent$ defaults read com.apple.screensaver {
askForPassword = 1;
askForPasswordDelay = 0;
tokenRemovalAction = 0;
So the settings get applied correctly.
The problem is - after screen saver kicks in or when MacBook goes into sleep mode and I want to continue work - no password prompt appears and I go back to desktop without any authorization!
I see this behaviour on admin user account, but when I login in as root - prompt appears and asks for password to unlock desktop.
Can you help me troubleshoot the problem? How can I log /see what is happeining after screen saver is terminated by mouse move or key stroke?
Regards,
Krzysztof

Gals, Gents,
I actually figured out the root cause of the problem. I am using EncFS to encrypt my home folder and each time the user logs in a script is being executed:
MINE:~ ent$ cat /Library/Management/loginhook.sh
#!/bin/bash
# $1 = logged in usernam
# try to mount /e using encfs entry in keychain
PASS=$(security find-generic-password -ga EncFS 2>&1 >/dev/null | cut -d'"' -f2)
RAW="/Users/.$1"
MOUNTPOINT="/Users/$1"
echo $PASS | sudo -u $1 /usr/local/bin/encfs -S $RAW $MOUNTPOINT
It is executed as a login hook, so:
MINE:~ ent$ sudo defaults read com.apple.loginwindow
LoginHook = "/Library/Management/loginhook.sh";
LogoutHook = "/Library/Management/logouthook.sh";
The problem with that is that most probably all the Library settings are first read and only after that is the login hook executed. What it actually does is decrypting the EncFS volume and mounting it to the /Users/enc.
So... Library folder get's substituted and I can work on Library preferences files from my account, but they are not visible during the login process.
Anybody know how I can change this process to enable login script before Library is ever read?
I managed to work around with screen saver protection by adding it globally to /Library/Preferences/com.apple.screensaver.plist instead of local ~/Library/Pref..
But obiously that is not how it should be dealt with...
Thanks,
Krzysztof

HT6030 Having major Mail problems since I updated Maverick on my 27" iMac. Delays deleting emails and moving emails to other folders. Anyone else having this issue? If so, any known fixes?

I have an iMac that around 3 years old. Just installed Mavericks when it first was released. I also have a Time Capsule (2TB) that runs my network to my other three Apple devices: iPad2, iPhone 5s and a new Apple TV. Having major Mail issues here. Everything is very delayed and extremely slow. Moving emails to other folders sometimes takes a few minutes and the same goes for deleting emails. Delete them and they don't go into the trash for several minutes. It's getting very frustrating to say the least. Mail also quits very often. Mail also will freeze with the little color ball spinning, therefore I would have to force quit Mail. When the errors occur, it's automatically sent to Apple but there hasn't been an update since 10.9.1 that has fixed it. Apparently, that update was only for gmail issues. Anyone having the same problem? Fixes please?

I have my entire network and all Apple devices setup as IMAP, not POP. If your settings are setup as a POP account on all devices, emails will not erase when deleted on your other devices. Just something to keep in mind. I'm sure you're aware of this but just wanted to throw it out there. Google IMAP vs POP. However, it seems like your having the same issues as I am. I'm going to swing by an Apple store by me and speak to the genius bar and see if they can come up with something or are aware of this issue. Keep you posted.

Automated Backups failing since V12 Update

Hi,
I recently upgraded my database server to the V12 (GA in my region). I have 3 servers running and configured for an automated backup at 12:00 AM every day.
This morning I discovered we had 20 additional SQL Servers running, each one with an hourly time stamp from the last which I can only imagine is a re-try of the original export. When trying to delete these databases the portal said "An error occurred
whilst existing this request, please re-send". I did try to re-send several times for each database and they all failed. Approximately 20 minutes later all the databases started to just disappear on their own (After I had turned off the automated backup
in the settings).
I checked over the upgrading documentation and couldn't find any details of problems with the Automated backups post upgrade so I am unsure if this is a bug in the system or a problem on the particular databases?
I have manually run the backups as indicated in the error email and that worked fine.
Thanks

Hello CAWeb,
My name is Eli Fisher and I am a Program Manager on the SQL DB team. We are aware of the issue you have stated above and there is work being done to fix the issues.
I would be glad to look into your specific issue for more details. If you would like, you could send your database name and server name to my email address and I could look further into what is happening. My email alias is elfish at Microsoft dot com.
Additionally, if you are using automated export for backup purposed, we have built in backups for all Basic, Standard, Premium databases. You can use these backups to restore up to any point in time within your database's backup retention period. Additionally
a daily backup is made geo-redundant so if there is a regional disaster you would be able to restore your database. If you would like to learn more about these capabilities look here:
Point in Time Restore Blog http://azure.microsoft.com/blog/2014/10/01/azure-sql-database-point-in-time-restore/
Geo-Restore Blog http://azure.microsoft.com/blog/2014/09/13/azure-sql-database-geo-restore/
How-To use the Restore capabilities:
Geo-Restore: http://azure.microsoft.com/en-us/documentation/articles/sql-database-geo-restore-tutorial-management-portal/
Point in Time Restore: http://azure.microsoft.com/en-us/documentation/articles/sql-database-point-in-time-restore-tutorial-management-portal/
Restore a deleted database: http://azure.microsoft.com/en-us/documentation/articles/sql-database-restore-deleted-database-tutorial-management-portal/
Hope this helps!

Help imessages and texts will say delivery failed since current update on my 5s.

I have iOS8.1currently on my phone and software is up to date. I have an iphone 5s The last few weeks randomly both imessages and text messages will not go through. It will say "delivery failed". Sometimes that is the case and other times the message apparently goes through because I get a reply from the person at the other end of the message. The frequency this keeps happening is getting worse by the minute!! Please help

Hi Raquel2178,
It seems you are unable to send or receive sms messages or use the iMessage service. That does sound troublesome. The following article may help you resolve this issue:
Restart your device and check for updates
Restart your device.
Check for a carrier settings update.
Check for an iOS software update.
Contact your carrier
If you can't send or receive SMS or MMS messages, contact your carrier to check your text messaging plan.
Thank you for contributing to Apple Support Communities.
Take care,
Bobby_D

Update password request won't stop

Every time I log into any web site I use regularly and which requires a password, Firefox pops up the "would you like to update the saved password" box, even though the password is already saved. Is there any way I can stop this, without disabling password saving altogether?
Many thanks.
David

1.Clean any saved password you have for the affected website.
2.Install the "Saved Password Editor 2.7.1" addon.
3.Have Firefox save the wrong password once.
3.Go into the addon's personalized password manager.
4.Edit the password and save the popup as an image for future reference.
5.Clean any saved password you have for the affected website (again).
6.Go to the website, log in and this time, refuse to save the password. This will put the website on the exception list.
7.Go into the addon's personalized password manager.
8.Create a new saved password and enter the informations as stated in the printscreen from previous step, but input the right password.

[solved] Sounds failed since last update.

My system was fine on Friday, sounds playing normally.
I used the machine briefly over the weekend and as normal kept things updated with pacman -Syu. I am aware that plenty was downloaded and I think that I noticed a kernel rebuild.
Today I have no sound. The rest of the system is functioning normally, but movies play silently and sound files do not play at all.
I have looked through dmesg and tried 'dmesg | grep -i alsa' and 'dmesg | grep -i oss' with nothing to report. Wondering if it was some volume problem I tried aumix and it gave the error:
[me@two ~]$ aumix
aumix: error opening mixer: No such file or directory
[me@two ~]$
So:
- Is there anything else that I should try?
- Is there some final stage to the weekend's updates that I stupidly overlooked?
- Has anyone else experienced similar?
I suppose that it it possible that this is a random occurrence and that the update is a complete coincidence. Is there any way to tell?
Thanks in advance,
Richard.
Last edited by r_j_h (2011-05-31 14:17:36)

karol wrote:
You can try
modprobe snd_pcm_oss
The devs removed some udev rules one of which autoloaded those modules.
http://mailman.archlinux.org/pipermail/ … 00793.html
Superb! That solved it.
Many thanks,
R.

Secrurity padlock is not showing on secure sites since I updated too Firefox 5

A padlock symbol used to appear in the header part of the screen when visiting a secure site such as a bank, this does not now happen.

Beginning with Firefox 4, the padlock is no longer a part of Firefox; it can give users a false sense that a site is secure by not supplying all of the information about a site. Familiarize yourself with the '''''Site Identity Button''''' in Firefox:
*https://support.mozilla.com/en-US/kb/Site+Identity+Button
*http://www.dria.org/wordpress/archives/2008/05/06/635/
You can install an add-on to show a padlock in the URL/Location/Address bar:
*https://addons.mozilla.org/en-US/firefox/addon/padlock-icon/

Slow Framerate since OSX Updates?

Why? The EFI Update can't remove. Framerate less then 12 fps.
Of an expensive laptop can I expect more?!!!!!
What can i do? i think this is not only my Problem..

I have a mid 2010 MacBook. I don't get so less frame rates. Install os x using the recovery DVD which came with your Mac. You will have to erase your data and then you can install any OS X you want.

10.8.3 update fails with "osx update can't be installed on this disk. An error occurred while evaluating javascript for the package"

Hello,
I am getting the above error whilst trying to install the update

Permission repair, too?
Take a look here: https://discussions.apple.com/thread/3811748?start=0&tstart=0
And possibly here: https://discussions.apple.com/thread/3889562

Major Security Fail since OSX Update - Password Request from Screensaver & Sleep Mode

Similar Messages

Maybe you are looking for