HackerNews中文版

我感到困惑的是，为什么在启动我的Mac时，Wi-Fi符号会亮起，尽管我还没有输入密码。我进行了测试，在远离我的Wi-Fi网络的地方，它并不会亮起。苹果的支持页面上说：“在带有Apple Silicon的Mac上，如果开启了远程登录并且有网络连接，可以在重启后通过SSH解锁FileVault。”以及“使用SSH解锁FileVault需要网络连接，并且在某些配置中使用FileVaultPolicy与平台单点登录。”[1][2]这意味着Wi-Fi密码将存储在FileVault加密卷之外。（在哪里？）这很好，但即使“远程登录”对我来说是关闭的（也没有SSO/MDM），它仍然连接到Wi-Fi。我从未选择过将Wi-Fi密码默默地从FileVault保护中移除。当然，他们可能会对这些信息进行“安全隔离”或其他处理，但这并不是同一回事。这类似于我在iOS 17中遇到的iCloud密码同步自动启用问题[3]。安全模型在没有用户同意的情况下发生了变化。存储的内容和位置并不明确。他们只是决定某些内容在用户过去做出选择后可以自动更改。我认为我并没有过度反应。这看似是一件小事，但它显示了他们如何（以及确实会）做出这样的改变。<pre><code> [1] https://support.apple.com/en-ca/guide/security/sec8447f5049/web [2] https://support.apple.com/en-ca/guide/deployment/dep82064ec40/web [3] https://news.ycombinator.com/item?id=38648725</code></pre>

查看原文

I was confused why the Wi-Fi symbol lights up when I boot my Mac, before I enter the password.I tested this, far away from my Wi-Fi network, and it doesn't light up then.Apple's support pages say "Unlock FileVault using SSH: On a Mac with Apple silicon with macOS 26 or later, FileVault can be unlocked over SSH after a restart if Remote Login is turned on and a network connection is available." and "Network connectivity for FileVault is necessary to unlock FileVault using SSH and in certain configurations using FileVaultPolicy with Platform Single Sign-on." [1][2]So that means the Wi-Fi password will be stored outside of the FileVault'ed volume then. (Where?)Cool, but even "Remote Login" is off for me (no SSO/MDM either) and it still connects to Wi-Fi. I never opted in to Wi-Fi passwords being silently removed from FileVault protection.Sure, they might "SecureEnclave" that thing or whatever but it's not the same thing. It's similar to the iCloud Password Sync auto-enable issue I had with iOS 17 [3]. The security model gets changed without the user's consent. It's not clear what is stored where.They just decide something is okay to auto-change after the user made a choice in the past.I don't think I'm overreacting. It's a seemingly little thing, but it shows how they can (and do) just make moves like that.<pre><code> [1] https://support.apple.com/en-ca/guide/security/sec8447f5049/web [2] https://support.apple.com/en-ca/guide/deployment/dep82064ec40/web [3] https://news.ycombinator.com/item?id=38648725</code></pre>

告诉HN：FileVault无法保护macOS上的Wi-Fi密码 26