Friday, March 20, 2020

Authenticating with your Apple Watch

So, Apple added new security features to try to make your actions more secure but at the same time a bit more convenient.  If you decide that you want to do something in the Finder that requires additional permissions, they now display a helpful dialog.  Like, just today when I wanted to delete this 32-bit only detritus that got left when I upgraded to Catalina.

Up pops the dialog, waiting for approval...

... and look, there it is, on my wrist.




So, I'll just double-click that side button and...


Hmmm.  Do you think that perhaps Apple didn't consider that people might actually implement "security best practices"? Authenticating the current user doesn't mean you automatically get admin privileges, because people who are being safe don't log on as admin all the time.

Now, I'm not going to argue that "a non-administrator shouldn't be deleting things like this".  That's fine, it's why the regular dialog prompts for a username as well as a password.

I'm pointing out that every time that dialog displays now, my wrist twitches because Apple decided to make the watch beep and vibrate before asking for pointless validation.

And once again, it demonstrates that Apple's QA department and developers must all be logging on as administrators all the time.  That or they don't own Apple watches.

No comments:

Post a Comment

All comments will be moderated. No spam, offensive language, politics, etc. Stay on topic and it'll probably get through.