3 ms·
I'd keep Guest access for desktop usage enabled, mainly for asset recovery. A Guest user can be restricted to internet browsing which makes a poorly informed th
by oneplane 4y ago
I'd keep Guest access for desktop usage enabled, mainly for asset recovery. A Guest user can be restricted to internet browsing which makes a poorly informed thief likely to connect the device to the internet, allowing for FMI to ping the (approximate) location and do a remote wipe. You can still leave guest access for other facilities off while keeping this on.
The question would become a matter of "is recovery part of security"?
- NeedMoreTime4Me 4y agoIf this works, it’s a legitimately good idea. Otherwise the thief might realize he can’t connect and try to wipe the device directly.
- JumpCrisscross 4y ago> mainly for asset recovery Aren't backups a far better solution?
- anamexis 4y agoI think asset here means the computer itself.
- judge2020 4y agoI feel like this isn't much of an issue with newer macbooks where bluetooth via Find My network allows location data to be exfiltrated regardless of wifi connectivity. Also, I believe (on M1) that entering guest mode requires the computer to reboot into an untrusted state, so even if there's some 0-day to bypass Guest mode access control, the main encrypted filesystem won't be available.
- Aaron2222 4y agoLooks like it does that for any system with FileVault enabled: https://www.howtogeek.com/297611/how-to-set-up-a-guest-user-account-on-macos/ https://www.howtogeek.com/297611/how-to-set-up-a-guest-user-...
- judge2020 4y agoGood to know, I've only owned a HDD imac (so I didn't use filevault) before I got a M1 laptop so I wasn't sure if it applied everywhere.