Article:		A Look at Keychain Access (and Why You Should Care)
Subject:		Problem is with auto-login, not keychains
Date:		2005-12-19 10:56:12
From:		Occam
The so-called "Bad News" has nothing to do with the security offered by keychains. If you're at all concerned about your system's security, don't enable automatic login. The keychain framework is very securely designed, and there are no problems with keychains themselves. Requiring a password to login, and using a password-protected screen lock when away from your computer, are basic precautions on any platform. The keychain framework is undeserving of this ridiculous fear-mongering. And no, you can't access keychain contents by simply starting up the machine in Target Disk Mode. (One wonders why that was even mentioned in this article...) You still need the keychain password.

Showing messages 1 through 1 of 1.

• Problem is with auto-login, not keychains
  2005-12-19 11:15:06  Giles Turnbull | [View]
  
  
  I included advice about disabling automatic login in the 'Good News' section, just after the 'Bad News'.
  
  As for mentioning Target Disk Mode; just because I thought that if I didn't mention it, someone would in the comments. You're right to point out that the keychain contents are not wide open in this context, however, and I apologise if I didn't make that clear enough in the article text.