Apple Event: May 7th at 7 am PT

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Guest user

Hello


Since registering for iCloud I have a guest user on my mac. I understand this is part of the find my mac function. HOWEVER when I log into guest user it opens Safari with my hard drive icon visible, my two external drives visible, finder activated and the settings icon on the task bar .


ALL are accessible and can searched and all contents functioning.. I have unticked share folders.


This is the most ridiculous situation imaginable. The thief doesn't even have to log in ! About as secure as a marshmallow in the rain. The only reason I activated iCloud was to find my mac and that certainly would not happen if said thief has access to everything on it. Strange feature to build into an OS upgrade.


There goes the DVD drive, there goes security. There goes iDisk. There goes iWeb. There goes upgradability. Great progress. Next we'll only be using windows.

iMac, iMac running mavericks

Posted on Nov 10, 2013 6:51 AM

Reply
8 replies

Nov 10, 2013 7:57 AM in response to LowLuster

hmmm - the person nicking my imac would be able to copy all my stuff off the three drives; fiddle in settings, then format the hard drive and go merrily on his way. Certainly wouldn't be sitting there staring at the Mavericks desktop waiting for someone to tap on his door. Surely there should be NO access to the hard drive where all my files are accessible or the additional drives and definitely not settings ....

Nov 10, 2013 8:04 AM in response to sparks2

Well once it is stolen it is no longer yours. Possession is 99% of ownership.


You do realize the above was a joke don't you?


Try this. Login to that Guest users account and see if you can copy your files to an external drive without having to type in your Admin password. If you can then you are right. If you can't then there is nothing to worry about. That is unless the thief knows your Admin password.

Nov 10, 2013 9:50 AM in response to sparks2

In your own account highlight the external drive and press CMD i.

Scroll to the bottom of the properties box and untick the ignore permissions box.

Confirm that your account is in the list of accounts and you have read/write permissions, apply the changes.


Test with your account and a guest account.


I suggest you test this with a spare external drive, could be a USB pen drive, and confirm that this is the outcome you expect and it will work correctly with your files.


You should not be able to read the your user account on the Macintosh Drive from the guest account, the folders should have a red no access icon on them.

Nov 16, 2013 7:33 AM in response to sparks2

sparks2 wrote:


Next we'll only be using windows.


If you think Windows is gonna prevent the thief from grabbing all of your data, well, good luck.


As LowLuster explained, Guest account is part of the activation of iCloud Find my Mac.

If you want to be sure that no one would get your data off your drives you must use encryption. OS X can securely encrypt entire volumes using XTS-AES 128 encryption since Lion. Apple calls it File Vault 2.

Nov 16, 2013 7:59 AM in response to sparks2

...and, you can add one more layer of security, setting up a Firmware password. To do so you must boot your computer from Recovery Partition and choose Firmware Password Utility from Utilities menu bar.


If you have a 2010 Mac or later, no one but Apple can unlock, without the correct password, a computer that has Firmware password enabled.

Nov 16, 2013 9:35 AM in response to sparks2

The information I posted would stop a casual person from looking at your files, but as other posters state if you want complete security for your files on any operating system the only way is to encrypt them.

A number of ways have been suggested here, you will need to make your own decision on how far you want to go down that path.

In general the more secure you make your system the more it can impact on its usability, whether from extra CPU usage from decrypting the files as you need them to having to use a password to get the computer to boot up.


If you decide to use a different operations system you will need to make exactly the same decisions that are required with a Mac, the implementation may vary but the principle is the same.


Hope you get the machine as secure as you feel necessary.

Guest user

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.