Security issue in Network preferences

Question

Security issue in Network preferences

I have snow Leopard using a Data stick from wind mobile. The data stick when installed want to install an interface called "mbbethernet". When I go into system preference->Network, a authentication screen appears which I cancel because I did not request any change or modifications. The mbbethernet interface then disappers from the network settings. When I look at my Interfae settings for the Wind mobile data stick I noticed instead of seeing huewei manufacture name I will see it change to Apple modem. My network settings are locked and this change managaes to occur from huewei to Apple modem.

My Network settings are locked and should only be changed when I enter my admin password, so eve though it is locked the change occurs, any ideas?

MacBook Pro, Mac OS X (10.6.8)

Posted on Jan 17, 2012 2:59 PM

Reply

Answer 1

Shootist007

Level 6

16,703 points

Jan 17, 2012 3:21 PM in response to macfrombrampton

ROOT/SYSTEM can change settings without you knowing or accepting those changes.

Locking things only stops anyone that doesn't know your password from making changes.

Reply

Answer 2

Jan 18, 2012 2:41 PM in response to Shootist007

I am aware that the root system can make changed, however I am the only one with root access on my Macbook Pro so since I did not make the change how is the change being circumvented to allow soomeone else access to my network settings? I am also logged in as a stadard user and not a Administrator.

Reply

Answer 3

Shootist007

Level 6

16,703 points

Jan 18, 2012 2:47 PM in response to macfrombrampton

No you are not the only one that has ROOT privileges. The system has them also. Changes are being made to system files all the time. If the SYSTEM had to stop and ask you, the main Admin User, for permission you would need to type in your password over and over constantly.

Reply

Answer 4

Jan 23, 2012 12:41 PM in response to Shootist007

Yes, of course the system has access to the system. My concern is that a network change was made to my configuration changing the type of CCL used for my wind mobile Data stick and I did not perform the change. this should never occur! Only if I set the Modem CCL or a application (Virus malware) performed the function.

Reply

Answer 5

Jan 30, 2012 10:15 PM in response to macfrombrampton

The 1st graphic shows what it chagned to. I do not know how it occurred since the network profile is locked. The second is what it should be and how I expect it to remain.

Reply

Answer 6

fane_j

Level 4

3,697 points

Jan 30, 2012 10:39 PM in response to macfrombrampton

What the "modem+change.gif" pic shows is precisely nothing. All the options in Modem panel are dimmed (aka grayed out), meaning they are not available in the current state. IOW, no modem is selected.

Note that this is not (any longer) something peculiar to the Mac -- nowadays it is a common feature of GUIs. You need a refresher in Mac interface. See, for instance,

<http://support.apple.com/kb/HT2473>

(look for "If a menu item is dimmed")

Reply

Answer 7

Jan 31, 2012 7:07 PM in response to fane_j

The firest picture shows what my network setting changed to while using my Wind mobile data stick. The second picture shows what it should be. The network preference is locked as shown below.

Reply

Answer 8

fane_j

Level 4

3,697 points

Jan 31, 2012 8:11 PM in response to macfrombrampton

Mm, I've seen you operate elsewhere

Virus 8399.emlx

virus JS.Obfus-48

so you'll need nimbler footwork to catch me.

AFAICT, your only problem is accepting that you don't have a problem, and that's a problem I can't help you with.

Reply

Answer 9

Jan 31, 2012 9:03 PM in response to fane_j

Does anyone know what would allow a change to a network prefrence without unlocking ?

Reply

Answer 10

Feb 10, 2012 7:18 PM in response to macfrombrampton

I have a screen shot of me opening the Newtork icon under the system preference. Note that the network preference is locked and I do not enter the admin password I only enter "cancel"

I enter "cancel" and the folowwing appears.

Then when I exmin the Wind mobile Interface it has changed to "apple" from huewai

Why would the change occur without the admin password?

Reply