Hacker News new | ask | show | jobs
by jackson1442 1203 days ago
Definitely should be an os-level feature to disable all that, similar to using panic mode on ios to disable biometrics.

I personally boot my laptops to the filevault screen and no further when going through the security checkpoints. Keeps the disk encrypted and requires my password to continue.
1 comments
highwaylights 1203 days ago
“Would you like to enter the password before or after I check in the back to see if we have any latex gloves left, sir?”
link
mikepurvis 1203 days ago
Doesn't look like Filevault has a duress option— otherwise it'd be pretty nice to have a separate password that boots you to a dummy partition showing a fresh desktop install with apparently nothing on it. For bonus points, you could have the dummy OS kernel-patched so that it doesn't even show the other partitions as existing, and just pretends it's occupying the whole disk with mostly empty space.

"That computer? Oh yeah, I just picked it up, officer; was going to start configuring it when when I arrive at my destination."

link
actionfromafar 1203 days ago
Rookie mistake. It should have a shitload of random stuff on it, recently updated, including something mildly embarrasing¹ on it.

1: it depends on the person what that is, but it should be believable, "in character" so to speak.

link
desro 1203 days ago
When both FileVault and Guest account is enabled, logging into the guest account boots you you into a basically Safari-only sandbox.

https://support.apple.com/guide/mac-help/change-guest-user-s...

link
Someone 1202 days ago
> "That computer? Oh yeah, I just picked it up, officer; was going to start configuring it when when I arrive at my destination."

That can get you into trouble with customs when the device looks new.

link