Skip to content

Comment on macOS vulnerability: Total physical access opened when screen sharing is on

Comments

I accidentally found this vulnerability that when you remote login into a Mac using Screen Sharing
Did you expect someone next to your machine to see everything you do

The “Sharing” part of “Screen Sharing” seems to imply that, doesn’t it?

and be able to take control when you remote into it?

That’s more surprising. I think the main issue is that, if you start it remotely, the distinction between screen sharing and Remote Desktop isn’t obvious.

Edit: Apple’s support page (https://support.apple.com/en-gb/guide/mac-help/mh14066) only mentions initiating screen sharing from the computer whose screen is being shared, and is clear about the reverse:

“While your screen is being shared, the user of the other Mac sees what’s on your screen and can open, move and close files and windows, open apps, and even restart your Mac.“

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.