Windows Files and Folders vulnerable on a Mac with Boot Camp

[nikhil0082]

As we all know, we can run Windows 7 or Windows 8 on a Macintosh Computer, using the Boot Camp Utility by Apple, which partitions your Hard Drive into two - Macintosh HD and Windows.

ScreenShot2014-08-03at25257pm_zps3cae71aa.jpg Photo by nikhil0082 | Photobucket


Macintosh enabled the feature of Guest Login from the Operating System, Lion and above.

This feature allows you to log in to the PC, browse the Internet or use an USB Flash Drive, etc without entering the Password.

new_lion_login_zpsc442bd45.jpg Photo by nikhil0082 | Photobucket
[]

The Guest User gets access to the Hard Drive Partitions of the Computer after logging in without any Password.

ScreenShot2014-08-03at15738pm_zps5aef559e.png Photo by nikhil0082 | Photobucket


The Macintosh HD (Partition where the Mac OS Data is stored) is secure and cannot be accessed from the Guest Log In.

ScreenShot2014-08-03at15844pm_zps8216bb4d.png Photo by nikhil0082 | Photobucket


However, when you try to open the Windows Partition, you can view and transfer the files from the Partition

ScreenShot2014-08-03at15859pm_zps006eb5f7.png Photo by nikhil0082 | Photobucket


This makes the data on the Windows Partitions vulnerable to unknown users.

Macintosh OS has provided some Parental Controls, which allow Access Control for the Guest Login. However, these have no option for limiting the access to System Partitions.

ScreenShot2014-08-03at24603pm_zps30c16b68.jpg Photo by nikhil0082 | Photobucket


This could be a major security flaw, as all the Data on the windows partitions can be accessed.

Good Day.

[jaylach]

I have never advised the usage of the default 'Guest' account in Windows whether on a fully Windows system or through an Apple. I have always advised going through the steps of creating a restricted account for visitors. I don't know if this would help to circumvent the above stated vulnerabilities but still consider it a good practice.

[DeborahJ]

Interesting. I guess the thing to do would be to disable the Guest Account and never keep it active.

[jaylach]

By default the guest account should already be disabled... can't remember for sure. But YES, this account should be disabled and never used.

Do a search looking for hacks to the Windows guest account. It is so well documented as to how to hack it is like painting by numbers.

[nikhil0082]

A Guest Account comes Handy when you want to provide access to your computer to an Unknown Person. Also, once the person logs out, all his files get deleted, which saves Time.
Its a nice feature, however should be made more Secure.

[nikhil0082]

By default the guest account should already be disabled... can't remember for sure. But YES, this account should be disabled and never used.

It was disabled on my System too, however after a recent update to the MAC OSX 10.9.2( Mavericks), it got enabled automatically.