- 1 Post By nikhil0082
3rd August 2014, 18:40 #1
Windows Files and Folders vulnerable on a Mac with Boot Camp
As we all know, we can run Windows 7 or Windows 8 on a Macintosh Computer, using the Boot Camp Utility by Apple, which partitions your Hard Drive into two - Macintosh HD and Windows.
ScreenShot2014-08-03at25257pm_zps3cae71aa.jpg Photo by nikhil0082 | Photobucket
Macintosh enabled the feature of Guest Login from the Operating System, Lion and above.
This feature allows you to log in to the PC, browse the Internet or use an USB Flash Drive, etc without entering the Password.
new_lion_login_zpsc442bd45.jpg Photo by nikhil0082 | Photobucket
The Guest User gets access to the Hard Drive Partitions of the Computer after logging in without any Password.
ScreenShot2014-08-03at15738pm_zps5aef559e.png Photo by nikhil0082 | Photobucket
The Macintosh HD (Partition where the Mac OS Data is stored) is secure and cannot be accessed from the Guest Log In.
ScreenShot2014-08-03at15844pm_zps8216bb4d.png Photo by nikhil0082 | Photobucket
However, when you try to open the Windows Partition, you can view and transfer the files from the Partition
ScreenShot2014-08-03at15859pm_zps006eb5f7.png Photo by nikhil0082 | Photobucket
This makes the data on the Windows Partitions vulnerable to unknown users.
Macintosh OS has provided some Parental Controls, which allow Access Control for the Guest Login. However, these have no option for limiting the access to System Partitions.
ScreenShot2014-08-03at24603pm_zps30c16b68.jpg Photo by nikhil0082 | Photobucket
This could be a major security flaw, as all the Data on the windows partitions can be accessed.
4th August 2014, 00:48 #2
I have never advised the usage of the default 'Guest' account in Windows whether on a fully Windows system or through an Apple. I have always advised going through the steps of creating a restricted account for visitors. I don't know if this would help to circumvent the above stated vulnerabilities but still consider it a good practice.
4th August 2014, 19:14 #3
Interesting. I guess the thing to do would be to disable the Guest Account and never keep it active.
5th August 2014, 02:00 #4
By default the guest account should already be disabled... can't remember for sure. But YES, this account should be disabled and never used.
Do a search looking for hacks to the Windows guest account. It is so well documented as to how to hack it is like painting by numbers.
6th August 2014, 17:36 #5
A Guest Account comes Handy when you want to provide access to your computer to an Unknown Person. Also, once the person logs out, all his files get deleted, which saves Time.
Its a nice feature, however should be made more Secure.
6th August 2014, 17:37 #6
It was disabled on my System too, however after a recent update to the MAC OSX 10.9.2( Mavericks), it got enabled automatically.
Originally Posted by jaylach