Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.sys.mac.system > #29288 > unrolled thread

firmware password

Back to article view | Back to comp.sys.mac.system

Contents

  firmware password dcohenspam@talktalk.net (Daniel Cohen) - 2012-08-10 19:01 +0100
    Re: firmware password me@home.spamsucks.ca (Király) - 2012-08-10 18:14 +0000
      Re: firmware password Michelle Steiner <michelle@michelle.org> - 2012-08-10 11:26 -0700
        Re: firmware password Lewis <g.kreme@gmail.com.dontsendmecopies> - 2012-08-10 20:20 +0000
          Re: firmware password Michelle Steiner <michelle@michelle.org> - 2012-08-10 13:27 -0700
            Re: firmware password nospam <nospam@nospam.invalid> - 2012-08-10 16:37 -0400
            Re: firmware password Lewis <g.kreme@gmail.com.dontsendmecopies> - 2012-08-11 03:54 +0000
              Re: firmware password Michelle Steiner <michelle@michelle.org> - 2012-08-10 21:03 -0700
                Re: firmware password J.J. O'Shea <try.not.to@but.see.sig> - 2012-08-11 06:23 -0400
                  Re: firmware password Michelle Steiner <michelle@michelle.org> - 2012-08-11 07:39 -0700
                    Re: firmware password J.J. O'Shea <try.not.to@but.see.sig> - 2012-08-11 15:24 -0400
                  Re: firmware password Wes Groleau <Groleau+news@FreeShell.org> - 2012-08-11 13:41 -0400
                    Re: firmware password JF Mezei <jfmezei.spamnot@vaxination.ca> - 2012-08-11 14:12 -0400
                      Re: firmware password Lewis <g.kreme@gmail.com.dontsendmecopies> - 2012-08-11 18:38 +0000
                Re: firmware password nospam <nospam@nospam.invalid> - 2012-08-11 10:57 -0400
      Re: firmware password Alan Browne <alan.browne@FreelunchVideotron.ca> - 2012-08-10 14:37 -0400
        Re: firmware password me@home.spamsucks.ca (Király) - 2012-08-10 23:46 +0000
          Re: firmware password Michael Vilain <vilain@NOspamcop.net> - 2012-08-11 13:21 -0700
        Re: firmware password J.J. O'Shea <try.not.to@but.see.sig> - 2012-08-11 06:23 -0400
      Re: firmware password nospam <nospam@nospam.invalid> - 2012-08-10 15:11 -0400
    Re: firmware password Lewis <g.kreme@gmail.com.dontsendmecopies> - 2012-08-10 20:15 +0000
      Re: firmware password dcohenspam@talktalk.net (Daniel Cohen) - 2012-08-11 12:18 +0100
    Re: firmware password Ant <ant@zimage.comANT> - 2012-08-11 14:12 -0700
      Re: firmware password Wes Groleau <Groleau+news@FreeShell.org> - 2012-08-11 18:39 -0400
      Re: firmware password Lewis <g.kreme@gmail.com.dontsendmecopies> - 2012-08-12 02:22 +0000
      Re: firmware password billy@MIX.COM - 2012-08-12 03:55 +0000
        Re: firmware password dcohenspam@talktalk.net (Daniel Cohen) - 2012-08-12 14:27 +0100
          Re: firmware password billy@MIX.COM - 2012-08-14 03:06 +0000
            Re: firmware password dcohenspam@talktalk.net (Daniel Cohen) - 2012-08-14 15:49 +0100

Page 2 of 2 — ← Prev page 1 [2]

#29295

In message <1komcau.a6j0ko7lmxv8N%dcohenspam@talktalk.net> 
  Daniel Cohen <dcohenspam@talktalk.net> wrote:
> I am considering setting a firmware password on my Mac.

> Using Montain Lion, if I want to change startup disks using the option
> key at startup I can do it provided I enter the firmware password.

Right.

> From various discussion forums (it does not seem to be mentioned on
> Apple's site) I get the impression that other things one might want to
> do at startup (verbose mode, single-user mode) are not possible at all
> when a firmware password is set, it isn't a matter of having to enter
> the password to continue.

Right.

<http://support.apple.com/kb/HT1492?viewlocale=en_US&locale=en_US>

I know it talks about Open Firmware, but the same applies to the EFI
password.

> Am I right in this? If so, what actions are prohibited sompletely and
> which trquite a password?

You cannot boot Single User or Verbose.

However, single user mode booting isn't needed because you can boot off
the Recovery partition which gives you access to a terminal, Disk
Utility, and even to Safari.

-- 
There are strange things done in the midnight sun/By the men who moil
for gold; The Arctic trails have their secret tales/That would make you
blood	run cold; The Northern Lights have seen queer sights,/But the
queerest they ever did see Was the night on the marge of Lake Lebarge/
When I cremated Sam McGee

[toc] | [prev] | [next] | [standalone]

#29316

Lewis <g.kreme@gmail.com.dontsendmecopies> wrote:


> 
> <http://support.apple.com/kb/HT1492?viewlocale=en_US&locale=en_US>
> 
> I know it talks about Open Firmware, but the same applies to the EFI
> password.
> 

> You cannot boot Single User or Verbose.
> 
> However, single user mode booting isn't needed because you can boot off
> the Recovery partition which gives you access to a terminal, Disk
> Utility, and even to Safari.

Many Thanks for this.

Yours was the only response relevan to my question.

Do you happen to know what restrictions (if any) there are on length of
a firmware password and what characters may be used?

--
<http://www.decohen.com>
The Labyrinth of the Heart: Changed Myths for Changing Lives 
book and e-book <http://www.decohen.com/labyrinth>
Send e-mail to the Reply-To address, not the From address.

[toc] | [prev] | [next] | [standalone]

#29335

Does anyone use this firmware password on their Macs? I used to do it 
for non-Apple computers.
-- 
"Oh, good morning, my little worker ants! That's just a figure of 
speech; I would NEVER compare you to insects. At least not after that 
sensitivity training seminar those maggots at the network forced me to 
attend!" --Kay, Murphy Brown
    /\___/\         Ant(Dude) @ http://antfarm.ma.cx (Personal Web Site)
   / /\ /\ \                Ant's Quality Foraged Links: http://aqfl.net
  | |o   o| |
     \ _ /        If crediting, then use Ant nickname and AQFL URL/link.
      ( )         If e-mailing, then axe ANT from its address if needed.
Ant is currently not listening to any songs on this computer.

[toc] | [prev] | [next] | [standalone]

#29336

On 08-11-2012 17:12, Ant wrote:
> Does anyone use this firmware password on their Macs? I used to do it
> for non-Apple computers.

I used to.  When I had children whose curiosity could almost be mistaken 
for malice.

-- 
Wes Groleau

    There are more Baroque musicians than any other kind.

[toc] | [prev] | [next] | [standalone]

#29343

In message <DrmdnbMLcLInV7vNnZ2dnUVZ_vednZ2d@earthlink.com> 
  Ant <ant@zimage.comANT> wrote:
> Does anyone use this firmware password on their Macs? I used to do it 
> for non-Apple computers.

I have it set on the Mac the kids use because 1) I don't want them
accidentally booting off a DVD or another drive and 2) they don't know
how to bypass it.

I use FileVault on my Laptop.

-- 
Every man over forty is a scoundrel.

[toc] | [prev] | [next] | [standalone]

#29345

Ant <ant@zimage.comant> writes:

> Does anyone use this firmware password on their Macs?

I use it on my computers at work.  I also have padlocks
on them (to prevent access to the RAM) and cable locks
(as are commonly used on laptops).  This is because I
work with some thoroughly untrustworthy people, and am
at different places different days of the week (the
computers stay where they are).

That said, it has to be disabled when doing things like
OS updates that require a restart...

Billy Y..
-- 
        sub     #'9+1   ,r0             ; convert ascii byte
	add     #9.+1   ,r0             ; to an integer
	bcc     20$                     ; not a number

[toc] | [prev] | [next] | [standalone]

#29348

<billy@MIX.COM> wrote:

> Ant <ant@zimage.comant> writes:
> 
> > Does anyone use this firmware password on their Macs?
> 
> I use it on my computers at work.  
> 
> That said, it has to be disabled when doing things like
> OS updates that require a restart...
> 
> Billy Y..

I started the thread, largely because it is recommended if one use the
Undercover recovery software. They recommend it because it mkes it
harder for a stolen machine to have Undercover removed.

As has been discussed elsewhere on the thread, only a very little harder
on older Macs but, as far as I have read, several of the newer models
can only have the password removed (if one does not know it) by an Apple
service provider.


Mind you, I think the latest version of Undercover may be too clever for
its own good.

Billy, when you say it has to be disabled if a restart is required, do
you actually mean disabled beforehand or can one just enter the password
at the time of restart? The former would be awkward.
-- 
<http://www.decohen.com>
The Labyrinth of the Heart: Changed Myths for Changing Lives 
book and e-book <http://www.decohen.com/labyrinth>
Send e-mail to the Reply-To address, not the From address.

[toc] | [prev] | [next] | [standalone]

#29391

Daniel Cohen <dcohenspam@talktalk.net> writes:

> Billy, when you say it has to be disabled if a restart is required, do
> you actually mean disabled beforehand or can one just enter the password
> at the time of restart? The former would be awkward.

For some things, like OS updates that require a restart to complete,
it should be disabled.  It's not that difficult to do, though.

Billy Y..
-- 
        sub     #'9+1   ,r0             ; convert ascii byte
	add     #9.+1   ,r0             ; to an integer
	bcc     20$                     ; not a number

[toc] | [prev] | [next] | [standalone]

#29410

<billy@MIX.COM> wrote:

> Daniel Cohen <dcohenspam@talktalk.net> writes:
> 
> > Billy, when you say it has to be disabled if a restart is required, do
> > you actually mean disabled beforehand or can one just enter the password
> > at the time of restart? The former would be awkward.
> 
> For some things, like OS updates that require a restart to complete,
> it should be disabled.  It's not that difficult to do, though.
> 
> Billy Y..

Not difficult, I agree. But exactly one of those things that one tends
to think of afterwards rather than before.
-- 
<http://www.decohen.com>
The Labyrinth of the Heart: Changed Myths for Changing Lives 
book and e-book <http://www.decohen.com/labyrinth>
Send e-mail to the Reply-To address, not the From address.

[toc] | [prev] | [standalone]

Page 2 of 2 — ← Prev page 1 [2]

Back to top | Article view | comp.sys.mac.system

csiph-web