Apple Flunks Security 101

|

Another OS X gripe: a lot of people have mentioned how wonderful OS X's 'keychain' feature is. I guess it's pretty nice to have integrated, centralized management of my secure information, but it has one big problem: it's completely insecure.

Apple's operating assumption seems to be that the only thing I care about securing are my passwords, because anyone can use "Keychain Access" to look at all of my accounts and account names/number without entering a password. The only thing that you have to type in a password to access are the account passwords. I can find no setting to make it more restrictive.

This is ridiculous. I don't even want to make it easy for a laptop thief to know what bank I use, or what insurance I carry. Getting a valid username is half the battle for any hacker. And worse, half of the account numbers for these places ARE MY SOCIAL SECURITY NUMBER. Gee, I wouldn't want that to be secured, now would I?

Really stupid, Apple.

About

My name is Patrick Calahan.

I live in San Francisco.

I do product development and consulting on Java and Business Intelligence.

This is my blog.

Contact

About this Entry

This page contains a single entry by published on July 4, 2004 3:02 PM.

Powerbook, Schmowerbook? was the previous entry in this blog.

'E' for Effort, Earnestness is the next entry in this blog.

Find recent content on the main index or look in the archives to find all content.

Powered by Movable Type 4.01