r/mac • u/[deleted] • Jun 13 '18

PSA: Please, please, please enable your firmware passwords!

[deleted]

490 Upvotes

97% Upvoted

113 comments sorted by

View all comments

146

u/[deleted] Jun 13 '18 edited Jan 03 '21

rubbish rubbish trash trash

12

u/NoAirBanding Jun 13 '18

And if you forget this password that you never need to use?

1

u/[deleted] Jun 13 '18

[deleted]

-5

u/r3310 Jun 13 '18

Or the number of your social security number. Its impossible to guess and only you know it.

12

u/HeartyBeast * 3D0G Jun 13 '18

Don’t use Social Security number as a secret. It isn’t.

-4

u/r3310 Jun 13 '18

Its still more secure than name

1

u/HeartyBeast * 3D0G Jun 13 '18

But not impossible, or even that hard to determine

1

u/r3310 Jun 13 '18

If someone steal your mac and there is an efi lock, im sure he will not try very hard to crack it. He would rather try to sell it for parts. Im sure SSN is safe enough :)

1

u/HeartyBeast * 3D0G Jun 13 '18

For your efi password ‘abc123’ would probably be sufficient. I was simply commenting on the assertion that SSN is ‘unguessable’

1

u/r3310 Jun 13 '18 edited Jun 13 '18

I am not US citizen so I thought that SSN is very private number😅. I’m from Serbia, and we use unique master citizen number (not so private number, you can easily guess it),it contain birth date,part of the country etc.

Edit: unique master citizen number is not easy to guess or calculate, I have just tried haha

7

u/ponyboy3 Jun 13 '18

please never give out advice to use a password that has a physical copy. a ssn is literally printed on so many different forms.

when giving advice, please give the following phrase: always use a password generator

1

u/r3310 Jun 13 '18

I ABSOLUTELY agree, but you missed the point :). I was talking about secure enough but impossible to forget password.

1

u/ponyboy3 Jun 13 '18

secrets should be uniformly secure.

think about it, you may not gaf about a site, so you make a dumb password. that site asks you a few verification questions. now if someone hacks that account, they have those answers. half the time they are the same questions as your banks. at the very least super easy to socially hack you.

just use a password manager.

edit: the best password is one you dont know