"nobody" in local@localhost - /  also called Unauthorized user...

So I had a hacker crawl up through the wiring and play merry **** with my machine for mischief. I moved, changed ISP's, run in stealth, and they're back!
Found tonight they were in spotlight poking around. No account on Log In, but unauthorized user "nobody" is listed here and there in the guts... Is this a name for the Mac's personal use? Or some parasite to delete and watch out for?
Other hacker traces appreciated... These are, I suspect, people I know vaguely- and malicious as ****.

When you decide to reconfigure your computer's setup, perhaps
after an all new installation where you can choose different user
accounts, privilege levels and then decide to not use the Admin
account as a daily user, then you may have an additional level
of security and assurance in using your computer.
You need not set up a Mac to run with your name as Admin and
that account need only be adequate enough to install, upgrade
the system, install applications, do preventative maintenance
and periodic updates, security update and so on; otherwise,
one may actually use a second account as daily user and have
the computer see that one as the primary. The main Admin PW
would still be for the original setup account, but your own daily
use would be under a different password and perhaps even an
account with less privileges.
By doing this, it is also possible to have a third or fourth account
and let other people log in to a guest account with little or no
access to most things in the computer. Isolating access by default.
I've set up a few OS X computers this way, and the main user is
something simple, such as iMac G4 User; and the registration is
not the kind of thing that would need to be registered online w/Apple.
The computer then is "iMac G4 user's computer." This makes it easy
to setup a computer, fully upgrade it, and also isolate the admin acct
from further tampering since it won't be the defacto boot account.
There are a few levels of access and privileges can be customized.
So, if access has been a problem, there is the Firewall and there
are accounts which may be used daily, which do not automatically
give anyone the rights to change the system or get into the Admin
account. You may have to login at bootup, or other secure devices
if you leave the computer physically available to other persons.
Most of this kind of information is available either in Apple Support
or in other Mac user web sites where security is discussed.
In any event...
Good luck & happy computing!
{ edited to ad a space between every word }

Similar Messages

  • "%userprofile%\appdata\local" is counted in the users profile

    Hello,
    In our environment we see some strange behavior on laptops. Users report that their user profile is becoming too large. We use the user Profile Management tool from Microsoft.(Limit profiles size - proquota.exe @ 100mb)
    So “%userprofile%\appdata\local” is counted in the users profile.
    After that userprofiles are inconsistant. Users log's on with a TEMP profile or cannot logon anymore.
    This seems just a symptom of a underlying problem. We can solve it by giving the user a new userprofile. But we have seen this problem too frequently now.
    How is it possible that de default variables %LOCALAPPDATA% en %APPDATA% suddenly are missing. The day before the user has no problem. It mostly happens on laptops after a VPN or WIFI connection. It looks like if the connection is lost before the local user
    profile is synchronised to the server profile.
    We also see Event 1530 frequently. Can this be a clue?
    Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.
    ## user registry handles leaked from \Registry\User\S-1###
    Is the missing of these variables the cause or effect of a corrupt user profile?
    Should we think of leaving roaming profiles for laptops? And look to UE-V or another solution? 
    Giving the user a new user profile is a workarround but not a solution.
    We are using:
     We use Windows 7 x86, latest patches, Office 2010.
     A Windows 2003 domain functional level
     We have an OU in AD wich contains the users and computer in subfolders.
     We use Loopback processing for Group policy so the user policy is linked to the client OU and not to the user OU.
     We user folder redirection to the homeshare (DFS namespace)
     User profiles are on a DFSnamespace but single server.
     We user Offline files for the Homeschare.
    Regards,
    Peter

    Hi Laarse,
    Thanks for the reply.
    Please try enable “Do not forcefully unload the users registry at user logoff”
    policy to check if it works. The Category path is
    Computer Configuration\Administrative Templates\System\user Profiles\
    After that, if the issue still exist, please collect below information for further research.
    Information Collection
    ===============
    1. Enable gpsvc debug logging by below steps:
    In the Regedit Editor, expand HKLM\Software\Microsoft\Window NT\CurrentVersion
    Create a new key called “Diagnostics”
    Under the key, create a DWORD value “GPSvcDebugLevel” and set the value as
    0x30002.
    After making this change, restart the computer.
    When the issue happens again, please send me the gpsvc.txt under %systemroot%\debug\UserMode folder.
    Please let me know the time you experience this issue.
    2. Please help run
    gpresult /h c:\gpresult.html command on a problematic client, and send me the
    gpresult.html file.
    3. Please help collect profile trace on a problematic client by below steps:
    Logon to a client with local administrator account.
    Open a command prompt with ELEVATED.
    Run "logman -start profile -p {eb7428f5-ab1f-4322-a4cc-1f1a9b2c5e98} 255 3 -ets" (without the quotes, if we face error, please do not use copy, manually input this
    command)
    Switch user (do not log off the administrator account) and try to logon with the problematic user to reproduce the symptom.
    After you login, please logoff the domain user and back to local administrator account.
    Run command
    "logman -stop profile -ets" with administrator privilege.
    Then send me the profile.etl under
    %SystemRoot%\Debug\UserMode folder 
    Thanks.

  • Using Control Reference to change subVI control - sub VI also called using a container

    Hello
    I am in need to update a control inside a sub VI that is also called inside a container in the main VI.
    Please see the project attached.
    My goal is simple -
    Change the "Main VI calling sub VI-Container.vi " panel's "FGV state"
    once the state changes, it needs to be propagated to the sub VI that is called within the container
    The sub VI's (sub VI called is "Check Time FGV.vi")  "FGV state" also needs to change when the main front panel's control
    How do I accomplish this ? just a FYI - the sub VI being called is at "C:\Projects\User Examples\Check Time with FGV\Check Time FGV.vi"
    Also my stop button functionality is broken, not sure why.
    Thanks for your help.
    Attachments:
    Check Time.lvproj ‏6 KB

    OK you have a few problems.  Lets address the Stop button first:
    Add a value change event for the stop button and put the stop button in that case.  Wire the button out of the event structure to the conditional terminal of the while loop.  WHAT IS HAPPENING:  You press "Stop" but the event structure is still waiting for an event so the loop never iterates.  Get rid of the wait.  the CPU will not be hogged unless you are generating events at warp speed.  No user can generate events that fast! so the loop will not be greedy.  The event structure does wait for an event it does not poll for them by running contineously.
    Now your subpanel.  You do know that the FGV runs once when you invoke the run method on it right?  You can change the contol value all you want but the vi won't do anything about it because the vi is not running.  And even if the vi WAS running changing the value of a control that is read once (outside the loop) would not cause the value on the wire inside the loop to change at all.  Does that clear up some of why what you are attempting will not work like that?
    Jeff

  • Local and National Calls

    Local calls are calls made within your local area. They're untimed and charged at a flat fee. Calls within Australia that fall outside of your local call area are usually charged as National calls.
    Check if a phone number is within your local call area by following the steps below:
    Step 1
    Download our Charging Zones guide, available in either PDF (3.06MB) or Word format (3.02MB)
    Step 2
    Find your local Charging Zone. To do this, view the Charging Zones guide and look for your town or suburb (or nearest major town)
    Step 3
    When you've found your local charging zone, check the District heading to view which district you're located within
    Step 4
    Check which areas are covered by your local call district. To do this, view page 5 of the Charging Zones guide. Look for the district you located in the previous step
    Step 5
    When you've located your district, check the contains the following charging zones section to see which areas are covered by local calls. National calls are long distance calls to fixed line numbers within Australia. If you're calling a fixed line outside of your local call charging zone, you'll be charged National call rates. View call prices for your Home Phone plan.

    Re: Local and National Calls
    I was told that I would get a copy of the contract stating what calls were allowed and what Internet usage I was allowed. I also was told that all calls were local with in a certain radius of exchange and that this was 60klms. I want this all in writing or a statement.

  • Cisco call manager user web page guide

    Hi all
    Has anyone got a really quick and easy call manager user web page guide? I need one for my users
    cheers
    Carl

    Thanks but I've tried all that. It happens in Chrome also. I've tried Opera and it works on that. I've read other forums and it looks like a Java script issue that Chrome and now Firefox Mobile cannot seem to resolve. My preference is Firefox and I'm sure as more tablets get out then this will be solved at some point. I just don't know how it is prioritized. I do know that in order for Androids to be viable in the business sector they need to address issues like these with a higher priority.

  • Error calling up user interface components

    Dear experts,
    I have this error that I'm having problems in solving.
    When i am accessing the /n/sapapo/scc07 transaction (Supply Chain Engineer), the following error pumps up "Error calling up user interface components".
    I have tried to solve it in various ways, reinstall the SAP GUI in order to have the last version, etc. Please advice regarding this. Keep in mind that I am a Functional Consultant so I will do my best to understand any technical solutions proposed by you.
    Thank you,

    Hi Alex.
    You can try reinstalling your SAP GUI Version (assuming you are using 6.40) or better to move to higher GUI version (7.10).
    While installing the SAP GUI select the SCM Add-On components also
    Refer to Note 396020 it may help you.
    Rgds
    Raja kiran R

  • CE 7.30: WS call with user sys_name _GUEST

    Hi there,
    There are some CAF WS that I call in my BPM.
    After having deployed a new version of my product, I'm now facing the issue that a CAF WS for one business object is called with user <sys_name>_GUEST (<sys_name>= system name, e.g. CE1).
    Normally it should use the user created under SOA->Application and Scenario Communication->User Account Management.
    As a workaround I gave full access to this CAF business object to the GUEST user, but that's not the way it should be.
    Where can I define which user should be used for calling a CAF WS?
    The weird thing is:
    Sometimes it correct after deploying another version of my product!
    Thanks in advance!
    Best regards,
    Eddie

    Eddie,
    A colleague of mine has just found this in the SAP Help - http://help.sap.com/saphelp_nw73/helpdata/de/d3/d5777a57914167bc9f4767068c3d39/frameset.htm
    It resolves the issue we were having and also mentions how the principal is determined when calling services - not sure if it is useful for you too?
    Gareth.

  • Problem while calling the user exit

    Hi All,
    In one of the program one user exit is called. Before this user exit ther is one FM . If I copy the same function module with a new name Z* , this user exit is not getting triggered. The program is going till the point where CALL CUSTOMER-FUNCTION '001' IS written but after that it's not going inside the user exit. But if I put back the original FM , this suer exit is getting triggered and it's gong inside the exit. I've activated the Project for this user exit also. As per our requirement I've to copy the original FM into Z* FM.But my doubt is when I put back the original FM , this User Exit is getting triggered whereas when I copied this FM it's not working .
    Anybody could helpme out why it's happening ?
    Thanks
    Alok

    Srinivas,
    Yes it's related to the other post where I had to copy one standard Function Pool.While copying the function pool I copied the FMs also.This problem is coming out of one FM ,when I changed this to Z* at the place where it is called, the user exit which is written inside that FM is not getting triggered even though program is reaching till the point where this user exit is called .
    Any clue ?
    Thanks
    Alok

  • Unauthorized user removing policy from document

    I'm facing a strange behavior in my environment.
    I have a policy ("GDEHPolicyTest") which only the "SetPolTestUser" user can have access (open, close, print, etc). I also have another user ("SetPolTestUser2") which do not have access to documents protected with "GDEHPolicyTest" policy.
    When I protect a document using the "SetPolTestUser" user and the policy "GDEHPolicyTest", the user "SetPolTestUser2" cannot open this document on Adobe Reader.
    But when I call the following process on workbench using the "SetPolTestUser2" user with the previous protected document it runs with success and return an unprotected copy of the document. This user should not be able to remove the policy from that document.
    See the Event page of that document:
    Is there any way that I can prevent that happen? Because this a security issue.
    * The same behavior happens if I call the webservice method "Remove Policy".

    Hi dspinatto,
    Dont get me wrong here please, i really appriciate everyones help and opinion on this matter.
    I just remarked the two different solutions to my question and wondered which one was actually true/working.
    So forgive me if i sounded a bit harsh or impolite, this was'nt intentionaly.
    Greets Danny
    Originally Posted by dspinatto
    Hi Danny,
    You do not have to believe to any of us, of course. Any of us could potencially go wrong here since we are human beings. You can go and try it for yourself and see the results to make your own conclusions. You do have a full ZESM test environment, right?
    Again, my understanding is that the last policy you apply is the one that gets enforced. When you assign a policy to a group, and a member of that group had a direct assignment to another policy, the new assignment will overwrite the previous one (and doesn't matter if that was direct or indirect). If you hover the pointer over an user in the MC Publishing tab, you'll see the policy that is in effect for the user, with the date and time that the policy was last published. Keep in mind that only one policy will be applied and enforced at the client at the same time. You can also check the results in the ZSC's about box.
    This is a simple test that can be done in 2 minutes. I'm running latest .154 build on an AD environment.
    Good luck,
    Daniel

  • How to stop an unauthorized user from changing my password.

    How do I block an unauthorized user from constantly changing my password?
    I had an old iPod Gen 4 stolen and someone from China is downloading Apps (I get email alerts when they download something and the last message said the computer used is registered in China).  I have changed the account password many times.  However, days later, I will get an alert email that my password was changed (not by me), or I will try to purchase something and my password will not work.  How else can I block this person from changing my password so he/she can use my account?  Will changing my user email address work?  Should I deactiviate all authorized computers to wipe them out?  I do not have any credit cards tied to my account, so they are only downloading free apps.

    Hi Gradux,
    Welcome to the Apple Support Communities! In this situation, I suggest contacting the application developer. The information on how to do that can be found in the following article.
    iOS: An app you installed unexpectedly quits, stops responding, or won’t open
    http://support.apple.com/kb/ts1702
    Contact the developer
    If you see the issue again, contact the developer of the app for help:
    Find the app in the App Store.
    Tap the app and tap Reviews.
    Tap App Support.
    I hope this helps,  
    -Joe

  • Calling a user defined function as default value for a column

    Hi All
    Can we call a user defined function as default value for a column ??
    for example:
    create or replace  function test1  return number is
    begin
    return 10;
    end;
    create table testt
    (id  as test1,
      name varchar2(20));
    getting error:
    Error at line 1
    ORA-02000: missing ( keywordThanks
    Ashwani
    Edited by: Ashwani on Jan 16, 2012 1:19 AM

    Hi;
    For your issue i suggest close your thread here as changing thread status to answered and move it to Forum Home » Database » SQL and PL/SQL which you can get more quick response
    Regard
    Helios

  • I have an iMac and iPhone 4s i also have ringtones as an app i am also an match user with the cloud how can i get a ringtone to appear in my library to use on my phone

    i have an iMac and iPhone 4s i also have ringtones as an app i am also an match user with the cloud how can i get a ringtone to appear in my library to use on my phone

    Oh nice, there's a PassKeeper application for the iPhone and iPad.  Simply install it and it should talk you through steps, otherwise their website is probably a great place to check.
    http://itunes.apple.com/us/app/passkeeper/id405021740?mt=8
    I really like the application 1Password, and it works across all the products, Mac, PC, iPad, iPhone.

  • Unauthorized User can see the aggregated result?

    Dear all,
    I got a problem that, unauthorized user can see the aggregated result.
    e.g. A user who is allowed to read data of Sales Office (0SALES_OFF) 0001 only. (It is done in the RSECADMIN already)
    Now a cube contains Sales records of Sales office 0001 & 0002 :
    Sales Office 0001  Sales Value 3000
    Sales Office 0002  Sales Value 2000
    When the user execute a query from the cube without any selection criteria, it give the aggregated Sales Value 5000.
    But if the user try to drill down for each sales office, it can then give error, because the user are not suppose to see Sales Office 0002 records.
    What I expect is an error at the very beginning when the user execute the query, saying the cube contains data that the user is not suppose to see, the user need to put in the correct Sales Office as criteria first.
    Is there anyone can help on this issue?? I have no idea how can this happened?
    Many Thanks!!!
    Chris

    Hi,
    Now I understood your concern correctly. Unfortunately, I do not have prompt answer for you. So, User should be able to view the aggregated result, but not to irrelevant sales office. If you don't have condition on Aggregated Result, restricting to individual Sales Office can be done in RSECADMIN.
    Let's wait for other's opinions.......
    Regards,
    Suman

  • Is it possible to trace unauthorized users? (via ip address or terminal id)

    Hi friends
    I was wondering if you can help me out with our Logon Securities predicament: We have set up some generic apps ids that are only known to a handful of users. Regular but unauthorized users are trying to sign-on using these generic ids by guessing the password and end up locking them when they exceed sign-on attempts. Is it possible to trace these unauthorized users? (via ip address or terminal id?) (We are on 11.5.10)
    Thanks in advance
    Ankur

    We look at the time of the failure from the fnd_unsuccessful_logins and then correlate it with the AppsLocalLogin.jsp entries in the apache access logs. The ip address is in the access_log.
    If you have a lot of logon failures combined with a lot of logons it may be tough to find the offending users but it might help you. Most of our users connect via SSO so finding our offenders are relatively easy. Very few users logon with AppsLocalLogin in our environment.
    Edited by: mcharchu on Feb 5, 2009 9:24 PM
    Edited by: mcharchu on Feb 5, 2009 9:25 PM

  • Call a user defined method in web dynpro from interactive forms

    Hi All,
    how to call a user defined method in web dynpro java, when a selecting value from drop down list which is in interactive forms by adobe
    thanks.
    Edited by: venkat99 on May 24, 2010 4:52 PM

    Well, you can use F4 help, of course, check here: http://help.sap.com/saphelp_nw70ehp1/helpdata/en/48/a1900622ec062be10000000a42189d/frameset.htm
    You need to select the value first and then use the submit button, which is mapped to the WD action submit (you have to set this up in WD designer!!). To use the submit button for more actions, you need to use something like a hidden field, where the value is set according to the action you want to do with your submit button. The submit sends this value back to WD, where you can switch the program code according to the value.
    Otto
    p.s.: and maybe this blog can help: /people/shruti.rathour/blog/2008/02/07/uploading-sap-interactive-form-on-the-abap-webdynpro-view

Maybe you are looking for

  • SAPSCRIPT for Intrastat.

    Hi all experts! I have a question concerning sapscript and Intrastat. First some background information: Country's inside EU have to inform to the locally central Statistic bureau. This information can be printed out from SAP. For my case we have to

  • Unable to create attachment view link in jdeveloper

    Hi , I am trying to configure an Attachment view link in Jdeveloper - using FUSIONAPPS_11.1.1.5.1.linux_x64 series.I followed the steps mentioned in the developer guide. http://docs.oracle.com/cd/E25178_01/fusionapps.1111/e15524/ui_attachments.htm#BA

  • WMVHD on Mega 180

    Hi, I ask your help to understand if my Mega 180 with 1 gb ddr and integrated geforce4 (with 128 mb dedicated) can play smoothly wmvhd. Is there any bios setting that can solve the problem? Or I have to use the latest nvidia drivers? Or simply I have

  • Have installed flash player a few times

    i have tried a few of the different options to download and i have restarted and the message that i dont have the right flash plug in and the option to get the one i have downloaded already cofused and irratated PLEASE HELP

  • Electronic book and Macbook air

    I just book an electronic book on iTunes thinking I would be able to open it in my Macbook air. Apparently the app that opens this type of files is only for iPhone/IPad. Is there any app apart from ibooks that I can use? I don't have an IPad. Thanks