November 25, 2011
1) You have a mac with Lion installed, you have administrative right on it
2) you wanna other people to be able to access the computer sometimes (like coworkers, roommates, etc) but do not be able to access your files ever, so you create non-administrative account for them
3) you enable filevault 2 to protect your files from being accessed by strangers (in office, for example)
4) user with account we created in pt. 2 and its password do this – reboot mac, hold down command+s on startup, then enters password for non-administrative account he has, and booting to single user mode with root access, game over, he has full access to all your files and even can change your password.
isn’t it a sick mindless design ?