Skip to main content
/

Site Navigation

Your Account

Choose Language

Aiding and Abetting/Accessory Passwords

I would like for iFixit to have a community policy on telling people how to get around password protected machines. Can we hear your ideas?

Here's my opinion:

A criminal charge of aiding and abetting or accessory can usually be brought against anyone who helps in the commission of a crime, though legal distinctions vary by state. A person charged with aiding and abetting or accessory is usually not present when the crime itself is committed, but he or she has knowledge of the crime before or after the fact, and may assist in its commission through advice, actions, or financial support. Depending on the degree of involvement, the offender's participation in the crime may rise to the level of conspiracy.

Answered! View the answer I have this problem too

Is this a good question?

Score 4
10 Comments

I forget passwords to sites. But your main password that you have to use every time you turn on your computer? I've had it happen with older customers, but it should be done only when you know.

by

I just talked to law enforcement on this. According to what information was obtained and the harm that it did, there is the possibility of a Federal warrant being issued to obtain the ip address of anyone rendering aid to a criminal and a search and seizure warrant being issued to come get your computer.

by

This should be moved to iFixit.com/Discuss, as it isn't directly repair related.

by

I feel participation in the question gets an up vote from me for everyone.

rab, you're probably right but many of us do not use the Discuss area of iFixit., and we'll have a decision here quickly. We have two password questions posted just today.

by

Many people's computers have auto-login enabled. Also, I think that if we were giving information to people who we *knew* were criminals, that would be one thing, but if someone comes on and doesn't mention that they're a criminal, we're probably okay.

by

Show 5 more comments

Add a comment

14 Answers

Chosen Solution

If I understand where you are going you would prefer a policy of NOT helping anyone with that type of problem. I have no problem with that but was recently chastised for holding back on just such a question. So basically I agree a firm policy should be stated one way or the other. Ralph

Was this answer helpful?

Score 2

5 Comments:

+1 for the question. Ralph

by

Another thought--if ifixit decide to prohibit this info I would think it would be necessary to remove those answers that provide the information. Ralph

by

absolutely

by

I agree it's a good idea to state a policy, however just something to point out - not everyone here reading or contributing to this forum resides in the U.S. - i.e. laws likely vary by country too. I'm no lawyer but I wonder if the issue of international participation here makes such kind of policy less useful?? OTOH since ifixit and their servers are probably in US, maybe that's the only thing that matters. anyhow just a question since the point of legality was raised.

by

When one obeys the spirit of the law but not the letter, one is doing what the authors of the law intended, though not adhering to the literal wording.

by

Add a comment
Most Helpful Answer

If someone obviously has a stolen machine, of course it makes sense to avoid helping that person out, but on the whole, I think it's futile to ban information. It's like outlawing a baseball bat because you can hit someone over the head and kill them with it. If someone is so inclined to kill another person, and baseball bats are unavailable, they will find a lead pipe instead. And yet, the law-abiding community will not be able to play baseball because of the restriction.

For every person who is supposedly kept from doing wrong with the information, you're keeping 100 people from doing good things with that same info. I have actually witnessed proof that we're hurting the situation if we don't spread the information: Several large recycling companies have sold me hundreds of iBooks WITH sensitive information on them, specifically because they did not know how to get past the open firmware password, and they were too lazy to bother taking other measures. They were definitely negligent in selling the machines, but the point is, if they'd had the knowledge, the data would have been erased. Luckily, I have a policy of wiping all hard drives clean before selling machines, but I'm certainly not the only one buying computers from recyclers, and who knows where the sensitive data is ending up? So, case in point, this is a simple example of how the lack of knowledge in the hands of the right people actually CAUSES the proliferation of massive amounts of sensitive information. And this is not an isolated incident -- it happens in YOUR city every day!

Besides, there's a workaround for everything. By telling someone how to put a hard drive in an external enclosure, we're giving a workaround to resetting a firmware password, so should we not tell people how to salvage data from a dead machine? Maybe by telling someone how to replace a faulty inverter cable, we're illuminating a screen and letting a thief see stolen data, so maybe we shouldn't talk about screen repair either? Etc, etc, etc.

It's a slippery slope, and if you're serious about going in that direction, the only solution is to shut down the site. And is that REALLY the answer we're looking for?

Was this answer helpful?

Score 3

3 Comments:

Clearly we didn't think things through. In light of your comments, we will be removing all repair-related guides and discussions to prevent CRIMINALS from using that information to repair STOLEN COMPUTERS! (Of course, I'm kidding, and I agree with you 100%.)

by

Burn the books! Close the libraries! Shut down the Internet! :-)

by

Great point!!! +++

by

Add a comment

I think if the thief is savvy enough to post a question here they're smart enough to find the answer elsewhere. I feel that not answering the password questions is a minor roadblock to criminals and insulting to legitimate users.

Was this answer helpful?

Score 2

2 Comments:

That's true, a google search for "how to break into a mac" returns over 20.7 million results.

by

If you google how to break a Mac password you get 126,000,000 returns. I think perhaps the only way around this is the one used by lemerise, if you don't want to -- don't. Otherwise answer the question. Ralph

by

Add a comment

Just to chime in my 2 cents' worth:

I'm a cynic by nature, so every time I see a question of how to get around the iPod password or OS X password, my first thought is "probably stolen!" Therefore, I don't participate in such questions.

I see many on this site that are much more optimistic than I am. They see those questions and seem to think, "Oh, a person in need! I am happy to help him/her in his/her plight!" and divulge the info.

At the same time that I feel we have a responsibility to be wise, I don't feel it is within my right to remove information because of its potential, just like I don't think a store has the right to ban Robitussin because some people might abuse it for recreational purposes. Following this analogy to its conclusion, the store's responsible action is to put the Robitussin behind the counter and require an ID to purchase. That way, a deterrent or disclaimer is made for those with ill intent, and the product is still available for those who don't abuse it.

So here's my suggestion: we should have a page somewhere on iFixit that has a well-worded disclaimer for/warning against abusing the information, along with a description of the procedure. Any questions about the topic would then be answered by linking to that page.

The result would be access for those who really need it, and legal coverage/awareness for those who might try to abuse the information. This seems to me to be the best between the worlds of responsible and informative.

Was this answer helpful?

Score 2

4 Comments:

I like this suggestion. besides, the question about screen lock code for the iPod seems like one of the most common questions, having one place with the definitive answer (and warning/disclaimer) seems like a good idea to avoid repeating the answer so many times.

by

@Bac Good point- I think I've answered that question about 5 times already. In the case of a clickwheel iPod, there's really no information to be protected by the lock, thus I don't find it to be a big deal.

by

I believe this is a good resolution to the problem. Great idea.

by

I really like this train of thought. In my business, I buy lots of broken laptops and I constantly run into people who seem shady at first. I've learned that instead of just deflecting them immediately and potentially losing a good deal, it's better to make the person prove that they are legit. For instance, when I buy computers, I make the seller sign a receipt, and include address, phone, name, and signature. I also will only meet at coffee shops (i.e. no back alleys or parking lots). If I'm buying an expensive computer, I always ask for the serial number and call Apple and ask them to run it against the stolen computer database. If the buyer is legit, he will comply, and if he's shady, he'll disappear. It's as simple as that. The point is, if you're unsure, put up some hoops for the person to jump through in order to ease your concerns, and if they do successfully jump through those hoops, you can be fairly confident they are legit. So in the context of this site, we could always take the approach of asking probing questions, i.e., ok, so you want to know how to reset the firmware password...why don't you first tell us about your situation, why this is necessary, what your intentions are, etc.? Then, chances are, the person will give information and various specific details that will put us at ease and make us far more confident giving out the info. In short, none of us are under any obligation to do anything we're uncomfortable with, so if you want to proceed helping someone, make the person ease your concerns first.

by

Add a comment

Guidelines for Answering Password Reset Questions

  1. Consider the context.
  2. There's no need to answer if you don't feel comfortable, but don't prevent others from answering.
  3. However, by all means, if you feel comfortable answering, treat it as you would any other question.
  4. Avoid duplicating information. Instead, link to the canonical password reset question for that device.
  5. With great power comes great responsibility.

Canonical Password Reset Answers

Community Rationale

Resetting a password is a standard service procedure that is documented by the manufacturer and should also be documented on iFixit. Of course, it makes complete sense to be wary about specifically telling someone who is acting suspicious.

This discussion has a lot of similarities to Stack Overflow's community policy on asking homework questions. Context and honesty matters, and has a case-by-case impact on whether a question should be answered.

Was this answer helpful?

Score 1

8 Comments:

My discretion and judgement on a case by case basis may be vastly different from a 17 year olds. Yet his judgement will prevail because he gives the the answer.

by

Your updated policy works for me. Ralph

by

I can live with this and thank you Kyle for taking the time along with all the rest of the contributors.

by

Is there any means this can be incorporated into 'About' or something? Like maybe an iFixit Wiki or something like that? With general guidelines or something...

by

I'd like to thank everyone for their participation. At least we've all given it thought. Obviously some of us will stay away from these questions and some will give the answers. But I feel a whole lot better about it now. It's nice to have a forum where we can all voice our opinions, it makes us stronger. Also thanks to management for not dictating to us and making this a true democracy. Based on this I'll have a new question tomorrow ;-)

by

Show 3 more comments

Add a comment

I think it's an ethical issue. Myself I would prefer that we don't give information about the procedures to access private data. But It's up to the web site owner(s) to take the final decision about this question.

Was this answer helpful?

Score 1

6 Comments:

doesn't it then become an issue HOW to judge if a person asking the question owns the Mac/iPod they need the password for? i.e. if that person does indeed own the machine, that "private data" is their own, and answering their question helps this site fulfill its goal?

by

I should have specified "For me it's an ethical issue...". If Ifixit allows responses to theses questions then go ahead bac and give the answer. I will simply not participate to these threads.

by

This decision isn't up to iFixit staff. This is a community concern, and we will abide by the community decision.

by

I do feel this is the responsibility of the iFixit Staff to make the final decision. But it is foolish < to me> to restrict info that is provided by Apple to everyone at no cost. I do not think the with holding of free info is not ethical given the format of this discussion is the world wide web which is designed to pass information and in the long run iFixit owns this site and as such has the final word. If you do not agree, we should agree to disagree.

by

Does the information appears in the Apple products user manual (troubleshooting section) ?

by

Show 1 more comment

Add a comment

True, I can see that people who may be using information from this site for illegal means could result in the person providing the information to face consequences. However this site isn't the only place one can find information on how to break into a mac. About 5 minutes ago, i googled "How to break into a mac" and am starting to doubt the security of my macs, because any attempt to password protect a mac can be broken with about 2 commands. Either way, i think that even if iFixit were to take action against issues such as this, I do not believe that it will impead the progress of someone who is stealing macs, and breaking into them.

Was this answer helpful?

Score 1

1 Comment:

Exactly +++

by

Add a comment

This is a touchy issue. I can understand both parts of the arguement. Personally I say it's up to the staff here at ifixit to make the decision. Apple facilitated my EX-girlfriend by showing her how to override my password and get access to my MacBook while I was In school and my MacBook ended up being destroyed because of it. I called Apple and asked why they would tell someone how to override my password without my authority and their answer was that as long as whoever is calling with this type of inquiry has the serial number to the device in question that they disclose any information pertinent to the inquiry. So, in other words people can just call Apple or visit an Apple forum and find out how to override or delete a password. so, if we don't do it here then people will just find out somewhere else to get the information. Luckily my logic board remained intact but the rest of my machine was destroyed, Although Apple facilitated this by showing an unauthorized user how to gain access to my machine they refused to cooperate in any way to get my machine fixed, I had to come out of my pocket and replace &@&% near the whole machine. On the other hand, I know that there are plenty of people out there that for whatever reason forget their passwords and need this help. Banning this info. from this site is futile. It serves no purpose. Everyone here has the option of answering or not answering these types of questions, answer at your own discretion.

Was this answer helpful?

Score 1
Add a comment

To be devils advocate:

First might I interject that apple makes its os based off of the free bsd engine (a unix based system for the layman) and unix sys admins have known how to reset the root password for 20+years. Someone doesn't need to call apple or a repair facility to do this, just have direct access to the computer. Apple just give their customers a pretty GUI (the wonderful graphics that you can click on) to do this with. A repair facility or company giving this information allows them to legally stay out of property disputes and other legal errata. Not to mention save themselves a ton of legal fees. You can pick up a unix sysadmin book from any major bookstore and find this info. It actually protects the company to provide this information regardless of the caller/customer. if you want this information for yourself go to any bookstore in america or look it up online (a point made by a previous poster).

Was this answer helpful?

Score 1
Add a comment

I look at it that if a person is asking for help and they are registered to ifixit site they should get the answer they need. I have been working on Mac's since the early 1990's and that includes as an Apple trained and Certified tech and Apple has never put a restriction on me telling ANYONE how to use the software that Apple Provides. It is on the Apple Software, that is in plain sight, how to clear and reset Macintosh passwords and iPod lock codes.

If there is a question and I know the answer I do not feel I should second guess their intentions. I choose to think most people are good and do not want to hinder their use of the machine in their possession. I hope ifixit agrees. If not they should shut down the site as it would hinder the people they are trying to serve.

Was this answer helpful?

Score 0
Add a comment

I have put in a call to a old friend that is a Federal District Judge and see if we can get a Federal legal opinion. I've also left a message with my attorney.

I believe Apple answered the question by requiring a password to be entered in the first place.

Yet his judgement will prevail here because he gives the the answer.

Aiding is not an easy question. Mary Surratt, the first woman ever hanged in the US, was probably innocent. Dr Mudd gets life for it and it takes a Presidential Pardon four years later to get him out was probably innocent. In 2003 the US Supreme Court evaded the question and refused the case, stating that the deadline for filing had been missed.

http://en.wikipedia.org/wiki/Samuel_Mudd

http://en.wikipedia.org/wiki/Mary_Surrat...

Was this answer helpful?

Score 0

5 Comments:

votes on a question I asked do not count

by

I just did a search for how to build an atomic bomb, also where to find a hooker, how to make cocaine, how to get away with murder, it's all there. "Prudent is he who can keep silent that part of truth which may be untimely." Pope John XXIII (1881 - 1963) And President Bush http://www.wavsource.com/snds_2010-01-31......

by

I respect your stance on the issue, but I don't think it makes sense to effectively assume that everyone is a thief, which is what banning the information does. If a person is not comfortable communicating certain procedures, then by all means he should refrain. But to blacklist categories of knowledge, in my opinion, goes against the core of what this site is about, which is that we OWN our computers, and we have a RIGHT to do any darn thing we want with them (within legal limits, of course). To step back from that and say, actually, we all have the right to do what we want with our computers, except that one guy over there, because he seems kind of shifty...I believe that goes against the philosophy in place here. If we segregate the population, then we have to decide who gets the keys to the kingdom -- you, or me? Should we implement some kind of litmus test? It gets very messy. And yes, because 1 in 1000 unfortunately chooses to misuse the information, the powers that be may then occasionally confuse the free distribution of information with the aiding of a crime, but, frankly, so be it! We will prevail in those cases. It makes more sense to freely exercise our rights than than to let the 1 in 1000 call the shots.

by

And you have the right to choose to act on it or not. (That's if the Feds don't come beating down your door as a suspected terrorist.) But I think the questions asked here at iFixit are less threatening to life and limb. The right to ask and be answered honestly without being suspected of being a crook.

by

rdklinc, mactech, et al : You have presented very valid arguments here and I am almost convinced. I will invite the judge to personally add comment and will henceforth abide by that decision and keep my mouth shut and abjure from any comments on your rights. Please respect my right not to do so. By the way I never got the police report on this same question from about two weeks ago.

by

Add a comment

And when iFixit made up their rules of how this site is managed I did not see censorship in the commentary. Apple provides the means for anyone to find the info at no charge. They provide the means to re-asign passwords by the use of any OS X install disk and going down the Utility menu to Reset Password. That is GIVEN BY APPLE to each of the people who buy their computers. And that software is required to be transferred to the new owner when the computer is sold. Has anyone you know ever sold a Macintosh to a client and NOT GIVEN THEM THE REQUIRED SOFTWARE LISTED BY APPLES LICENSE? So lets say they did not get the software when they got their computer and need to reset the computer. We let them know what they need and they can go to the source of the computer and request the software that was required to be given to them when purchased and they can use their computer. Also Apple provides the manual for the iPods that lists that you need to hook up your iPod to the computer it was restored with to clear the lock code and choose Restore to clear the device should you not have your computer or it had to be reloaded since last time you uploaded your iPod. If you call Apple they will freely give you this info. (might charge you for the call) But it is all available online by Apple without restriction. All we are doing here is giving iFixit clients a place to ask questions and get answers without having to search through a ton of data that is sometimes hard to find.

As far as Federal legal opinion, all info concerning the reseting of computer passwords or iPod are listed by the manufacturer free of cost online. But I am sure an important Federal District Judge will have the same opinion if they are give all the facts. ( That legal thing about being innocent until found guilty by jury )

Do not take this that I am just being argumentative but I feel the internet is an Open Forum and feel restricting access to info because someone doesn't know if someone is a thief is wrong.

Was this answer helpful?

Score 0
Add a comment

here's another suggestion (a semi-serious one)

if someone has forgotten their iPod screen lock code, why not just send them this "Let Me Google That For You" link:

http://lmgtfy.com/?q=forgot+my+iPod+scre...

then they're doing the research themselves :)

joking aside, as has been already pointed out by several people, this information is readily available - they don't have to find it on this site, and in fact they'll probably find more detailed descriptions elsewhere. Even Apple provides the info (and even the software to do so). of course the context under which Apple answers this question is not "what do you do when you've stolen an iPod", but rather they answer the question of what to do if you can't unlock your iPod...

to me the significance of this particular issue seems lower than the amount of discussion here would seem to indicate - there are far more significant ways to aid a criminal. As well, what's to say that giving someone info on how to clone a hard drive, or replace a hard drive, or replace the case of a laptop or iPod (where the serial number is visible), ... etc etc -- isn't possibly helping somebody who has stolen something?? we can't possibly know here. so do we ban those repair topics too?

that said, I'm not against putting the answer "behind the counter" as Ben suggested, that at least clarifies ifixit's intention that we're all here to help people with their own devices

Was this answer helpful?

Score 0

1 Comment:

I agree ++

by

Add a comment

What I think should be the policy, as people have expressed here, is personal preference, if you think a question sounds fishy, don't answer it, no one is forcing you too, no one says you must answer questions asking for passwords, if you aren't clear on whether you should or should not, don't, and someone who is decided they will/want to answer it will answer the question.

I personally don't feel bad in the slightest giving someone the easily obtained information on how to get around a mac password (and I usually give 2 or 3 out of 300 ways).

I'm sure we also all remember the "while on vacation in Nigeria..." question.

Was this answer helpful?

Score 0

3 Comments:

See it is that easy. If you want to answer, Do. If you do not want to, Don't. It's that easy. Thanks Rab777hp

by

I never got the police report faxed to me from the Nigeria question.

by

Well, I highly doubt the user wanted to go through the trouble, after all that work I'm pretty sure it was real (he was posting from texas) but why would anyone bother faxing a police report when they could just get an answer from another forum or a google search.

by

Add a comment

Add your answer

mayer will be eternally grateful.