3 ms·
It's simple to create multiple users on OS X. It's quick to switch between them. E.g. I have a separate user that I switch to just to contact a handful of cred
by PhantomGremlin 11y ago
It's simple to create multiple users on OS X. It's quick to switch between them.
E.g. I have a separate user that I switch to just to contact a handful of credit card / bank sites. Same with tax returns. I don't do them as my normal user. They are not readable from my main account. But I don't do enough. E.g. email and photos are still accessible.
Fortunately I lead an uninteresting life. The main threat to/from my photos is accidental deletion, filesystem corruption, drive crashes, etc. TMZ isn't going to pay anyone to steal them!
The problems are not simple to solve. What I've done is simple half-measures. It's very hard to do more than that.
Edit: and, of course, my normal user is "Standard", not "Admin". I switch to the admin user whenever I do sys admin. I never elevate privileges from my normal account.
- coldtea 11y ago>It's simple to create multiple users on OS X. It's quick to switch between them. It's also something 95% of OS X users don't do or care about.
- gammafactor 11y agoUnfortunately, and this goes for pretty much every UNIX out there with hardened (grsec) linux as possible exception, not just OSX, once someone has a local user on your machine, it's trivial to get root. On OSX, you don't even need a local privilege escalation exploit, so many other ways based on the way subsystems interact together. If you want robust security, you will need to forget about OSX/BSD/Linux and look at Qubes OS. It's the best we have right now and nothing else comes close. Alternatively, compartmentalize and segregate (at the hardware level, all virtual machines have tons of host escalation bugs) and accept the fact that you will get owned.