![]() For this and many other reasons, I suggest you have a backup of your data, both locally eg on an external drive(s) and in the cloud, as even if your Mac is stolen - it's great if a thief can't access it (eg decrypt FileVault), but as bad if you also can't access it. So, if you are really concerned about a thief getting access to your personal data, then enable FileVault, but beware that if you ever need to repair the drive, your data may not be recoverable. ![]() However, even this can be bypassed on older Macs with non-soldered RAM, because physical access to any machine often gives someone many ways to find a way around the machine's security. ![]() However, if you think someone may get physical access to your Mac and reset your password, Apple gives you the best option any company can (short of some kind of two step authentication), which is allowing the Mac owner/user to set a firmware password. So my guess is they include the resetpassword option for user convenience, while relying on the fact that most people don't know about it until they're locked out of their own Mac, and most/many people trust those they leave their Macs around to not also know this command, and if they do, to not use it on a Mac they don't own. Apple could have made it harder to reset the password by not having the resetpassword command available via Terminal in OS X Recovery - but most if not all Windows/OS X/*nix PCs/servers/etc can be compromised with physical access to them.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |