New answers tagged

26

There's a misconception about this. The problem actually isn't the single-user mode. For example consider the following scenario: Someone gets hands on your laptop. No harddrive-encryption and no BIOS-password. Now he has several options. Just to name two of them: Get the harddrive out of the laptop and simply use it from another PC. Getting around any ...


93

Physical access is total access, right? How is this any worse than a boot CD or yanking the hard drive and popping it into another system? Not that I'm a fan of OSX or this particular feature, but if someone has physical access to a computer with an unencrypted disk, they have access to everything on that disk anyway, so single user mode doesn't make that ...


8

In addition to protecting the drive with FileVault 2's full-disk-encryption, you can disable single user mode by setting a firmware password. This will prevent other users who can decrypt the drive, such as a multi-user machine, from access the single user mode, among other things. From Use a firmware password on your Mac: To protect the data on your ...


28

If FileVault is enabled, then you would need the FVDE credentials for one of the FVDE users in order to access single-user mode, even if you move the solid-state drive to a new machine. However, if you are trying to prevent an end user from accessing an Administrator account (and/or the root account), FileVault is not sufficient because of single-user mode. ...


0

PhotoRec is a tool that can be used to recover "accidentally" deleted photos and files. This tool can also be used to recover data after a drive was reformatted. A malicious buyer could use this tool to recover your old files. In a defensive tactic, you could use the tool on your own future machine prior to selling it, in order to determine which files ...


2

I just realized (with more research) that aircrack-ng needs a management frame containing the ESSID (it can be beacon/probe response/reassociation request) and two data frames containing the EAPOL messages. so i just captured a beacon frame from the AP and then used the wireshark's mergecap tool to merge the 2 .cap files (beacon.cap and eapol.cap) and that ...



Top 50 recent answers are included