Hacker News Reader

Precisely! Why would I care about a browser only mode for every day use? I have not rebooted my Air in weeks.

So there is two applications, right?

1) Surf station, if your borrow your Mac to a friend or stranger once in a while. 2) Anti theft.

Sure, running the browser only might increase browsing performance a bit. But I guess it won't make a big difference. Avoiding Flash and a add blocker is way more effective.

Has anyone seen any other recent advances in anti theft? Will the new Mac Air have a lock? The current one doesn't and I find that very annoying. There used to be a USB stick that would trigger an alarm when pulled without password deactivation. But I can't find it anymore and last time I check it was discontinued on Amazon.

Any solutions? Otherwise, lets build one and pitch it over Kickstarter!

Can't edit anymore: http://www.sourcingmap.com/usb-antitheft-security-alarm-for-... Looks nice but clumsy. I was looking for something, the size of a USB thumb drive.

Nice find. Your answer makes much more sense given apples focus on apps. I can't see them trying to compete with chrome, especially after announcing icloud.

Are Mac HDs that hard to get at? I thought most computer thieves (at least with PCs..) immediately put up a sell ad on places like craigslist or somewhere while they copied the HD and possibly wiped it.

They are easy to get at but I think you might be thinking a bit too highly of thieves.

There is no perfect defense but there are plenty of funny stories about stupid thieves that got caught by software floating around the internet.

I think what you say makes perfect sense, but do you have any information which actually says that "iCloud cleverly uses this to goad thieves into going online"?

This is indeed a really great reason to have this feature, but I'm just wondering if this was Apple's intended use of this feature.

When you activate ‘Find my Mac’ a dialog pops up and tells you that anyone logging into the Guest account will now only be able to start Safari. With ‘Find my Mac’ disabled the guest account works like it always has. I think Apple’s intent is pretty obvious ;-)

I also can’t really see the appeal of this as a feature. Logging into a normal guest account doesn’t require you to reboot into the recovery partition, for one, and a normal guest account also allows you to use all the apps installed on the Mac additionally to Safari which works just fine. There might be one or two attractive use cases beyond goading thieves into going online but those are to my mind very much edge cases.

I actually don't understand how this works.

Please correct me if I'm wrong (I don't actually know how the 'Find my Mac' feature works, so I'm guessing), but when the computer is first booted by a thief, it won't be online, which means that it won't be aware that it needs to disable access to all accounts except to the neutered guest account right? In fact, the only way that the computer will be made aware that the mac has been stolen is if the thief connects to the internet (Apple has done nothing so far to enhance the likelihood of the user connecting to the internet). Once the Mac is connected and is aware that it is stolen it's behaviour will change to block all access to user accounts. If anything, this change in behaviour might alert a thief that something is up (I'm giving a lot of credit to theives here) and that he should rid himself of the Mac.

Access to user accounts is not disabled. If the thief has the password he will still be able to log in and if the Mac is set up to automatically log in the thief will be able to access user accounts even without a password. (It is however, possible to remotely lock the Mac even if it is set up to log in automatically. You can also send messages to the Mac, wipe it or locate it.)

If the thief doesn’t know the password the only thing he can do (short of, say, replacing the HDD) is log into the guest account, i.e. restart to Safari on the recovery partition.

I am by no means an expert on this but maybe this is somehow related to the new full disk encryption? Does it make sense to not allow thieves to boot from the encrypted partition?

Like always with computers this is not watertight – at least as far as getting your Mac back is concerned. (Full disk encryption – which is optional – probably protects your data reasonably well.) There are ways to circumvent “Find my Mac”. The good thing is that thieves are usually not very bright.

If you have a password on your user accounts, the thief will only be able to access this browser-only guest account. The other accounts are already locked.

If you haven't put passwords on your user accounts, you're out of luck.