Screen sharing security question

I recently set up my imac to allow screen sharing from my MBP. On my iMac I randomly see the screen sharing icon appear in the menu bar despite not being connected. Is this normal?
Also i setup security so that it should only be me that is able to connect via password to my iMac, yet there is aslo an option to connect as a guest which connects & shows the imac screen & allows me to do things.
I thought the whole point of setting access only to me was that no-one else ( eg guest) could connect.
i am a bit baffled here, can anyone help me out?
TIA,
john

I would not consider the presence of the screen sharing icon normal. I encourage you to open terminal and run the command
netstat | grep vnc
the next time you see it. This will return either nothing (bringing you back to the prompt ending in $, or return a line such as this:
tcp4 0 39 10.0.42.116.vnc-server 10.0.42.243.54233 ESTABLISHED
In this case, my Macintosh is 10.0.42.116, and the computer connected to it is 10.0.42.243.
By this method you can determine if there is a glitch causing the icon to appear or if there is actually a connection being made to your Macintosh.
What you are probably experiencing with the guest account is a bit of confusion related to how Finder thinks of computers.
The Guest/User Account is not for Screen Sharing, but for File Sharing.
When you clicked "Share Screen..." the first time, regardless of if you connected to file sharing as Guest or Registered User, you got a box requesting "the username and password to share the screen of (computer name)." There, you probably selected remember password in keychain, and that is why you are not being prompted again, and why you are connecting to screen sharing as a guest. (You're actually connecting to screen sharing as your registered user, but you are connected to file sharing as a guest).
To change this behavior, (on the client Mac) navigate to Applications, Utilities, Keychain Access. There, you will find an entry with a blue @ sign as an icon, and your destination PC's name. The Kind will be Network Address and when you select the line the "Where" in the info viewer panel will begin with vnc://. When you find this line, press the delete key to remove the saved password, and don't tick the "remember" checkbox again.

Similar Messages

  • Screen sharing security?

    I'd be interesting to hear thoughts on the security of the screen sharing feature of Leopard.
    Is the content of the interaction protected or encrypted in any way?
    How easy would it be for someone to engineer a screen sharing 'attack' on a computer (without the users consent, obviously)?

    iChat Screen sharing requires that you Accept the call.
    It also contains an Audio component so you can talk to the person involved.
    As with any iChat A/V related chat it is Peer-to-Peer on a 1-1 basis.
    Given that it does go through many server on the internet between you and your Buddy (like a telephone call would) it does not go through the AIM servers like a plain text chat does.
    On the other hand the data is not encrypted unless you both have @mac names and IF anyone was actually at those Internet servers in between the data could be read.
    However you can end a Screen Share with the keystrokes Control+Esc
    From iChat Help
    *About screen sharing security*
    When you share your screen with a buddy, the buddy has the same access to your computer that you have. Share your screen only with trusted parties, and be particularly careful if you receive a request to share your screen from someone who isn’t in your buddy list.
    If the request comes from someone in your Bonjour list, remember that the person’s name is not necessarily accurate, so his or her identity is uncertain.
    While every screen sharing connection uses encryption, the highest level of security requires both participants to have .Mac accounts with encryption enabled. If this is the case, you will see a lock icon in the screen sharing window.
    If you need to quickly end a screen sharing session, press Control-Escape.
    Realistically it as dangerous as opening an email that you don't know the origins of and then opening a file contained in it.
    I personally have not tried transferring stuff from one computer to the other.
    So I don't know if there are any alerts to say a file is being sent. I would expect a progress bar at least but then again this may not be the front window.
    There is/was one Virus that was in the wild for the Mac OS X.
    It did involve iChat.
    To get it you had to have been sent an email and open what looked like a .jpg file.
    It would then spread to your other Bonjour Contacts via iChat.
    i.e. you had to do quite a lot yourself to actually get this virus.
    Ryan M who posts in iChat 3 posted a fix.
    In terms of how secure compare it to having to login in here at Apple.
    It's over the net and you have the control to end it but it is possible for people in the right place at the right time to read the data.
    if you give info away about yourself here such as your ID and password then people could use that (but the login page itself is a secure page).
    These questions are always hard to answer as an idea of a security risk tends to be a personal thing.
    10:26 PM Wednesday; June 4, 2008

  • I forgot the answers to the security questions. When I get the screen with security questions to be answered, the email adress where the reset procedure is sent to is wrong. How do I change it?

    I forgot the answers to the security questions. When I get the screen to answer them, the email address listed to send the email procedure is wrong. How do i change this email address?

    Alternatives for Help Resetting Security Questions and/or Rescue Mail
         1. If you have a valid rescue email address, then use this procedure:
             Rescue email address and how to reset Apple ID security questions.
         2. Fill out and submit this form. Select the topic, Account Security. You must
             have a Rescue Email to use this option.
         3. This is the only option if you do not already have a valid Rescue Email.
             These are telephone numbers for contacting Apple Support in your country.
             Apple ID- Contacting Apple for help with Apple ID account security. Select
             the appropriate country and call. Ask to speak to the Account Security Team.
    Note: If you have already forgotten your security questions, then you cannot
             set up a rescue email address in order to reset them. You must set up
             the rescue email address beforehand.
    Your Apple ID: Manage My Apple ID.
                             Apple ID- All about Apple ID security questions.

  • Remote desktop / screen sharing / VPN questions

    Hi all-
    OK, I am trying to set up our all-mac environment to do something in particular - but I am only 'novice' level at VPN stuff and 'noob' to the Apple Remote Desktop and Screen Sharing stuff. I already have screen sharing set up, and also have back to my mac set up - but these both seem to be 'whole computer' control methods, where the remote user takes over the entire target machine. I have a different need, but don't know what terms to use to describe it or how I might achieve it.
    Environment overview:
    2014 iMac, 2009 13" MacBook Pro, 2009 17" MacBook Pro - all running Yosemite.
    2013 AirPort Extreme handling the LAN, both wired and wireless. iMac is wired, MacBooks are wireless.
    iMac: Two users (UserA and UserB, both admins).
    MPB13: Two users (UserB as admin and UserC as standard).
    MBP17: Two users (UserA as admin and UserD as standard).
    I am wondering if this is possible to do, and if so - HOW? :
    UserB sits at the iMac, and is using it. UserA sits at MBP17 and wants to get something done on the iMac, so UserA logs into MBP17 as UserA then remotes into the iMac as UserA and does what they need to do in UserA's iMac account - without making UserB (who is still sitting at the iMac and using it) stop what they are doing.
    Hope this makes sense, and am looking forward to your input.

    UserA must have a user account set up on the iMac that is different from UserB. With this set up when UserA initiates a Screen Sharing session with the iMac from the MBP17 they will just need to log in with their user account. When they do that a dialog box will pop up asking if they want to share the display with the user currently using the iMac, in this case UserB, or if they want to connect to a Virtual Display, which would give them their own environment separate from UserB who is already logged in and using the iMac.
    Here is an example of the dialog box UserA should see when they attempt to start a screen sharing session with another Mac in which another person is already login in and using the Mac. In this case UserA will select the option to connect to the Virtual Display which allows them to work on the iMac without disturbing the user that is already using the computer. Note that the user already using the iMac may experience a slight performance hit because two users are using the resources on the one computer.
    As for the acronym VPN, it stands for Virtual Private Network which is a protocol for making a encrypted secure connection over a public network between two or more separate networks. Screen Sharing actually uses a protocol called VNC which stands for Virtual Network Computing.

  • Remote connection, screen sharing, etc question

    I'd like to remotely connect to my desktop either from a PC or another mac that isn't on my local network. I have a domain name registers, and i'd like to use this domain (godaddy.com) and just be able to type afp/smb/ssh (depending on if I'm on a mac or pc) and hhtp://www.mydomian.com and instantly get to my computer to change downloads and get files from an external drive, my OSX main disk, etc. I have a MobileMe account to, if thats any help. if I cant use my domain and somehow point it to my dynamic IP, I can use dyndns.
    thanks

    how would I set this up? do I forward 5900 (is that the ssh port?) and 22 on my router? or after that type ssh www.mydomain.com:5900? I'm not sure how to enable the ssh capability. I have remote management, screen sharing, file sharing, remote login, and web sharing enabled in settings, do i need anything else enabled, which ports exactly should I enable?
    Assuming you want to maintain secure connections over the internet, I would suggest configuring your home router to forward a random high numbered port to your target home system's port 22. Most home routers allow this, but how to do it varies from manufacture to manufacture. A Google Search will most likely find instructions for your model router.
    So lets assume you choose internet port 12345 to forward. Making an connect to your home system from the outside world would looks something like:
    ssh -p 12345 [email protected]
    That gives you an interactive shell login to your system.
    If you wish to tunnel a screen sharing VNC session you would use something like:
    ssh -p 12345 -L 5901:localhost:5900 [email protected]
    Then using your VNC client of choice you would connect to
    localhost:5901
    Your VNC client would then talk to local port 5901, ssh would send this to the remote system's port 5900 which is the default VNC server port.
    Using ssh to tunnel other protocols is done in a similar way, only the ports used will be different. Since I have only personally tunneled screen sharing, I'm not going to try to explain how to tunnel other protocols.
    NOTE: You can specify as many ssh -L options on the command line as you like. Also the SSHTunnel utility can help you setup ssh tunnels.

  • IChat screen sharing security/encryption

    I'm going to be using iChat for the first time and want to use the screen sharing feature between two computers running 10.6. iChat's documentation says:
    "While every screen sharing connection uses encryption, the highest level of security requires both participants to have MobileMe subscriptions with encryption enabled. If this is the case, you will see a lock icon in the screen sharing window."
    Neither I nor the person I'm going to do screen sharing with has a MobileMe account. I'm wondering:
    1. What is the difference between the encryption that "every screen sharing connection uses" and the enhanced security allowed with MobileMe accounts? How does this compare with, say, doing VNC over an SSH connection? Is it adequate for the usual "family help desk" tasks, which may involve typing passwords?
    2. I understand that one can get a free MobileMe account which only has iChat capabilities. Does this free MobileMe account enable iChat encryption, or do I have to pay to get that?
    Thanks!

    re 1)
    I am not aware that Screen Sharing is claiming to be Encrypted in each and every connection.
    As far as I am aware it uses a modified Apple Remote Desktop engine and is a VNC connection tied together with a Audio Chat (two separate Ports/Data streams in tandem) and that a problem connecting either part will result in failure of the whole connection.
    It is claiming to be encrypted in each and every connection -- as I quoted in the original post, "While every screen sharing connection uses encryption..." This is from http://docs.info.apple.com/article.html?path=iChat/5.0/en/17157.html

  • Screen Sharing Security Hole!!

    At my school we use remote desktop and also the computers have screen sharing on. today i learned that if you type in a persons username without their password it will first say username or password is invalid then if you do it agien without changing any thing it will grant you access. ***

    Don't know much about screensharing but did a search and found this article.
    It may have some more information for you, sorry I can't be of more help.
    http://www.peachpit.com/guides/content.aspx?g=mac&seqNum=232

  • Screen Sharing Problems/Questions

    Greetings!
    I really like the screen sharing feature of Leopard, however, it has a serious problem, but probably only for me, as I can't find anywhere on the internet where my problem is mentioned.
    Whenever I attempt to drag ANYTHING on the other person's computer, the mouse pointer freaks out and jumps to a random place on the screen, or even offscreen entirely. After it has completed its jump, it drops the drag leaving the window I was dragging in the wrong place, or moving a list of files to the wrong place.
    This renders screen sharing basically unusable for me.
    I've confirmed this bug, both ways, with two seperate systems. I can't drag on their machine and they can't drag on mine. All three of us turned off spaces and removed any external monitors to make sure that wasn't the problem. None of us are on an internal network... this was all done with iChat over Google talk on an internet connection.
    Can anyone confirm this bug?
    Has anyone found a fix for this bug?
    Thanks!
    -Sastira

    Umm.
    I am not sure you are doing it right.
    Go to the File Menu.
    iChat Theatre item.
    Navigate to File (Can be Movie or Pic or PowerPoint etc)
    Click the share button.
    The iPhoto Share works solely with iPhoto but the principles are the same.
    There should not be any Dragging involved.
    TO Send an Item as a file or include a pic in a text chat is different.
    In that case it is a quetion of dragging the item the the Text entry field during a Text chat or dropping it on a Buddy in the Buddy list.
    Sometimes with a New buddy (freshly added) the second option of Dropping it on their name can be more successful.
    10:36 PM Thursday; November 22, 2007

  • "Sharing" Security Question

    I have been running OS 10.4.5 on my PowerMac G4 and I noticed that when I click the lock at the bottom left of the Sharing System Preference Pane, it correctly locks, but when I re-boot the lock is NOT locked. Has anyone else experienced this? Why does it happen (can it be set to remain locked after a re-boot). I have not had this difficulty with any of the other panes (that is, they remain locked once I lock them). Thanks for any assistance or comments.
    Barry
    PowerBook G4 & PowerMac G4   Mac OS X (10.4.2)  

    Barry,
    Locking secure system preferences says: If you're an administrator on the computer, the lock icon on secure preference panes is unlocked when you log in to the computer. You can change this default setting so secure preference panes stay locked when you log in.Even though the article says Mac OS X 10.3 Help, it still applies to 10.4.
    ;~)

  • Having security issue with SL Screen Sharing

    Hello,
    Maybe I am missing some new setting in Snow Leopard that increases screen sharing security, but as it is, screen sharing is now insecure on my network.
    Prior to Snow Leopard I would log into my Mac from another without selecting the "remember this password in my keychain"... after finishing the session, I would again be asked for my password before ropening a new screen sharing session. All machines on the network were Leopard.
    Now, with all macs on the network Snow leopard, on one of the machines I can log on in the morning, work for a while, quit screen sharing, and go back in an hour and start sharing that mac's screen with no password required. Anoyone else can can do this also! I have checked the keychain on the Mac I am viewing from and there does not seem to be an entry there for screen sharing.
    On another of the Snow machines it always asks for the password, but on 2 of them, once I have started viewing another Mac's screen a password is no longer required regardless of the fact that I haven't checked that "remember password" .
    This means that after I leave a Mac from screen sharing it, someone else has full access to that machine just by clicking on the Share Screen button... unless I can close the hole somehow.
    Any ideas or a way to fix this would be appreciated.
    Thanks
    Jamy

    Hi all,
    I just upgraded to Snow 10.6.2 so through 2 separate updates, this security hole on all 3 Macs on my network exists.
    To test it I went to an office and opened a screen on another (Snow Leopard) Mac that was set up to allow users only to connect. I then quit Screen sharing, and returned 3 hours later, only to be able to open the Hard Disk window and return to that Mac's screen without any passwords required. I was very careful not to allow the Keychain to remember me.
    Since I originally posted I see another thread has begun up expressing essentially the same issue.
    I would strongly advise anyone who uses Snow Leopard in a secure environment , at least through 10.6.2, to disable screen sharing or risk unauthorized access, or monitoring, of their Macs from within their networks. Screen Sharing's security settings (if they work at all) do not work on Snow Leopard the same as they worked on Leopard.
    I have not found a fix for this in the 3 weeks since I first noticed it other than to disable it, or restart the Mac I started the session from, then it will ask for a password, but that is hardly an acceptable fix in some secure or corporate environments (akin to having to restart in order to empty the browser cache when accessing webMail lol)
    Regards,
    Jamy

  • I can't download apps! Every time I try, it asks me to chose a security question and I try, but I just comes up with a blank screen and I can't choose a question. If I click no, I don't want to put security questions, it doesn't install the app. HELP!

    I can't do it! I am willing to add questions but I can't because it just shows me a blank screen. I even tried rebooting my entire iPad2 and that didn't work. I know it is not a certain app because I tried multiple ones.... HELP!

    found answer on another thread...passing along
    https://discussions.apple.com/thread/4052317?start=30&tstart=0
    Re: Forced Apple ID Security Questions - Choice of 3
    Sep 26, 2012 11:38 AM (in response to KirstyHenderson)
    Hi all! I have found the answer in another forum and this has 100% worked for me!!!
    1) Quit App Store in multi-tasking.
    •From the Home screen, click the Home button twice.
    •Tap and hold on the app.
    •When it starts to jiggle, tap the red  ⛔ in the top corner to close it;
    ***Please close all open apps on your phone***
    2) Tap Settings.
    3) Tap Safari.
    4) Tap Clear History.
    5) Tap the Clear History button.
    6) Tap Clear Cookies and Data.
    7) Tap the Clear Cookies and Data button
    See the answer in context
    I hope this helps a lot of people!! Spread the word (seeing as apple doesn't seem to want to/care!)
    Nads

  • Security Question: Shared Files on a Network

    Security Question from a Network Newbie
    Hi:
    I recently returned from a meeting at a large city hotel.While at the meeting, I used the fancy hotel’s hard-wired connection to access the internet. Imagine my surprise when the next morning one of the others peakers mentioned to me, “I see that you were in the hotel; your computer was file shared to everyone in the hotel”!
    How can this be? I have never changed default settings toallow this.
    Does this mean that anyone in the hotel could have navigated to any file on my computer and accessed it?
    How do I prevent this from ever happening again, yet still maintain my ability to access the internet and get work done?
    Thank you!
    OS 10.6.8

    Just have Printer sharing and Bluetooth sharing checked in Sharing.
    I really appreciate your advice and realize you have nothing to do with Apple's design process, but why would Apple allow others to see your computer on a network when one has a firewall turned on and "Block all incoming connections" enabled? What good does this serve in an era when everyone is so concerned about security? Why would Apple allow this?
    How worried should I be: you say "they could see your System but not necessarily access your files.  Probably just the public dropbox." Is it likely that they could just get the public dropbox, or could some nefarious individual figure a way to access other files?
    Is there an OEM software product that allows good secuirty on an Apple system, ie no sharing of files/access to one's computer with certainty?
    Thanks again for your advice!

  • Screen sharing questions

    Merry xmas everyone.
    I have a few questions I hope you can answer.
    I just discovered screen sharing between my mac mini and macbook laptop via a physical ethernet connection using a linksys router (no wifi).
    I go to the finder and see the other computer and click share screen, and it shows up beutifully. But without asking for a user name and password. I tried logging in from a guest account and it then asked me for a user name and password. So just to make sure for my peace of mind, both machines have the exact same user name and password (and .mac account), so is that the reason they can both connect to each other easily without the need to verify.
    Is this share screen even possible via wifi (using Finder and not ichat)? Or just via a hard line connection?
    2nd... is there a way to share the audio between both machines? My overall goal is to connect to my main computer from my laptop from my night stand so I can listen to my podcast, and have them marked as listened to, so that I don't have to wrestled with keeping two podcast libraries on two different machines sync to my ipod... ugh.
    plus i won't have to drop the extra cash on an ipod dock.
    Thanks
    have a great new year everyone

    1. While screen sharing is it possible to drag a document from the remote screen to the computer you are using?
    No, but if you use iChat as your screen sharing tool you can copy the file(s0 manually that way. In Finder you could also simply both screen share and mount the filesystem of the mac.
    2. Does screen sharing work over the internet (like web sharing)?
    Not using the direct screen sharing abilities. But if the mac you're trying to control is set up to be accessed from the internet (with afp://) then you should be able to enter that address into the "New..." menu item window in the screen sharing application. The application is at: /System/Library/CoreServices.

  • How do I reset my security questions, there is not an option on my screen to send a recovery e-mail.

    I forgot my security answers and can not find a link to reset them.  I've seen to click on send e-mail in the passwords & securities tab, but I do not have any options on my screen that say to send an e-mail to reset my info.  How can I resolve this problem?

    You will need to contact iTunes Support, http://apple.com/emea/support/itunes/contact.html (select Account Security as your help topic).
    After you reset your security questions, it is highly recommended you add a rescue email address. To do so, log in at appleid.apple.com and click on Password and Security. Answer the questions and then click on "Add Rescue Email Address:"

  • HT6170 I forgot my security question answers and when i get to that screen, there isn't an option to send security info to my email on file.  Any thoughts?

    I am trying to authorize a new I-Mac for my I-tunes account.  I am being asked my security questions and I don't remember the answers.  The online help shows a way to get your answers emailed to the address on file.  There is not that option for me when that screen pulls up.

    You need to ask Apple to reset your security questions. To do this, click here and pick a method; if that page doesn't list one for your country or you're unable to call, fill out and submit this form.
    (118053)

Maybe you are looking for