July 2004 Archives
Another OS X gripe: a lot of people have mentioned how wonderful OS X's 'keychain' feature is. I guess it's pretty nice to have integrated, centralized management of my secure information, but it has one big problem: it's completely insecure.
Apple's operating assumption seems to be that the only thing I care about securing are my passwords, because anyone can use "Keychain Access" to look at all of my accounts and account names/number without entering a password. The only thing that you have to type in a password to access are the account passwords. I can find no setting to make it more restrictive.
This is ridiculous. I don't even want to make it easy for a laptop thief to know what bank I use, or what insurance I carry. Getting a valid username is half the battle for any hacker. And worse, half of the account numbers for these places ARE MY SOCIAL SECURITY NUMBER. Gee, I wouldn't want that to be secured, now would I?
Really stupid, Apple.
