4 ms·

Thanks for the feedback! Standard accounts are recommended by Apple itself as a best practice in lieu of administrator accounts. Also, sudo is not available in

Thanks for the feedback! Standard accounts are recommended by Apple itself as a best practice in lieu of administrator accounts. Also, sudo is not available in standard accounts which protects against any would-be vulnerability. I updated the post regarding application sources. I changed Google DNS with Cloudflare's 1.0.0.1. Others also mentioned the fact that suggesting a VPN provider is risky, so I also removed it. I know some steps are redundant coming from a brand new installation, but not everyone is willing to format their drive right now, so those steps are included as well. Again, thanks for the feedback!

notafraudster 8y ago
I didn't say for the standard account to use sudo; I said for it to use su to switch to an admin account, and then use sudo from the admin account -- as a point of illustration that if you have the admin password, it's game over, whether or not you're currently signed in as an admin or an unprivileged user. Unless standard accounts don't have access to "su" at all, but I can't see that being the case without locking off access to terminal functions altogether, which would make macOS completely unusable for I would wager most of the people on this site. Looking at /usr/bin/, su is 0755 permissions. Even if you didn't know the username of the admin account, /etc/passwd is 0644 so you could look it up as an unprivileged user -- again, unless macOS has some system level thing blocking all access to the terminal.
- miles 8y ago
  > Even if you didn't know the username of the admin account, /etc/passwd is 0644 so you could look it up as an unprivileged user Users don't appear in /etc/passwd on Mac OS X https://superuser.com/questions/191330/users-dont-appear-in-etc-passwd-on-mac-os-x https://superuser.com/questions/191330/users-dont-appear-in-...

4 ms·

Thanks for the feedback! Standard accounts are recommended by Apple itself as a best practice in lieu of administrator accounts. Also, sudo is not available in

by ricardbejarano 8y ago

notafraudster 8y ago
I didn't say for the standard account to use sudo; I said for it to use su to switch to an admin account, and then use sudo from the admin account -- as a point of illustration that if you have the admin password, it's game over, whether or not you're currently signed in as an admin or an unprivileged user. Unless standard accounts don't have access to "su" at all, but I can't see that being the case without locking off access to terminal functions altogether, which would make macOS completely unusable for I would wager most of the people on this site. Looking at /usr/bin/, su is 0755 permissions. Even if you didn't know the username of the admin account, /etc/passwd is 0644 so you could look it up as an unprivileged user -- again, unless macOS has some system level thing blocking all access to the terminal.
- miles 8y ago
  > Even if you didn't know the username of the admin account, /etc/passwd is 0644 so you could look it up as an unprivileged user Users don't appear in /etc/passwd on Mac OS X https://superuser.com/questions/191330/users-dont-appear-in-etc-passwd-on-mac-os-x https://superuser.com/questions/191330/users-dont-appear-in-...