Re: [MAGNet] Mac OS 9: auto unlock keychain on boot?

From: Anthony Roybal (ar@socrates.berkeley.edu)
Date: Mon Jul 31 2000 - 14:46:39 PDT

  • Next message: Connecting@Berkeley Feedback: "[MAGNet] Announcing the Connecting@Berkeley 2001 CD"

    A note of caution: If you create an AppleScript application, or use
    an AppleScript based program (such as KeychainUnlocker) to open your
    Keychain at boot time (by having the application or application alias
    in the Startup Items folder), your Keychain password will be
    accessible in plain text to anyone who has access to your computer.
    In general, this in not a good thing to do. :)

    Non-AppleScript programs such as Keychain AutoUnlock may also be
    vulnerable to snooping.

    Since you can have more than one Keychain active on your system, you
    might consider having multiple Keychains and starting up a Keychain
    with just the items that you need at boot time, such as servers. If
    you use an AppleScript applet such as Keychain Unlocker, make sure
    that you follow the instructions and save it as a Run Only applet,
    which helps a *little* as a precaution against casual snooping.

    Tony

    At 4:36 AM -0700 7/30/2000, Jarrod Wyrick wrote:
    >Mikael,
    >You are right. Keychain is fully scriptable. In the "Scripting additions"
    >folder you will find KeyChain scripting. For more information go to
    >http://til.info.apple.com/ and search for "keychain"
    >
    >
    >in addition,
    >
    >Third party utilities. There are a couple of third party shareware/freeware
    >utilities which will auto-unlock the keychain on startup before the volumes
    >mount. These include
    >
    >
    >Keychain Unlocker
    >
    >http://www.carnation-software.com/carnation/KeychainUnlocker.html
    >
    >Keychain AutoUnlock
    >http://www.chaoticsoftware.com/ChaoticSoftware/ProductPages/KeyChainAutoUnlo
    >ck.html
    >
    >
    >I hope this information is helpful,
    >Jarrod
    >• =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= •
    >Jarrod Wyrick 707.469.0990 voice
    >System Engineer
    >Higher Education jarrodw@apple.com
    >Apple Computer, Inc.
    >607 Elmira
    >PMB #607
    >Vacaville, Ca 95687 http://www.apple.com
    >
    >A minute of thought is worth more than an hour of talk.
    >-Anonymous
    >
    >
    >> From: Mikael Hansen <mikaelh@uclink.berkeley.edu>
    >> Date: Mon, 31 Jul 2000 11:03:51 -0700
    >> To: magnet-list@uclink4.berkeley.edu
    >> Subject: Re: [MAGNet] Mac OS 9: auto unlock keychain on boot?
    >>
    >> At 09:56 -0700 7/31/2000, Sara Leavitt wrote:
    >>
    >>> Is their a way to have the keychain auto unlock at boot up on Mac OS 9?
    >>
    >> I don't know if there is a way to do it, apart from writing a script
    >> or using a utility, which can simulate keys being pressed by the user.
    >>
    >> --
    >> Mikael Hansen <mailto:mikaelh@uclink.berkeley.edu>
    >> Programmer/Analyst, Letters & Science Computer Resources, UC Berkeley
    >>
    >> ------------------------------------------------------------------------
    >> The following was automatically added to this message by the list server:
    >>
    >> For information about MAGNet, its meetings and events, and its
    >> mailing list, including information on subscribing and unsubscribing,
    >> see the MAGNet Web site at <URL:http://mac.berkeley.edu/help/magnet/>.
    >
    >
    >------------------------------------------------------------------------
    >The following was automatically added to this message by the list server:
    >
    >For information about MAGNet, its meetings and events, and its
    >mailing list, including information on subscribing and unsubscribing,
    >see the MAGNet Web site at <URL:http://mac.berkeley.edu/help/magnet/>.

    -- 
    

    Anthony Roybal Information Systems & Technology University of California at Berkeley

    ------------------------------------------------------------------------ The following was automatically added to this message by the list server:

    For information about MAGNet, its meetings and events, and its mailing list, including information on subscribing and unsubscribing, see the MAGNet Web site at <URL:http://mac.berkeley.edu/help/magnet/>.



    This archive was generated by hypermail 2b29 : Mon Jul 31 2000 - 14:51:14 PDT