Jonathan Grynspan on Twitter: "@mjtsai Basically, if you've logged in once, attacker can use login screen 2 change your account PW w/Apple ID if they know the Apple ID PW."

Country	Code	For customers of
United States	40404	(any)
Canada	21212	(any)
United Kingdom	86444	Vodafone, Orange, 3, O2
Brazil	40404	Nextel, TIM
Haiti	40404	Digicel, Voila
Ireland	51210	Vodafone, O2
India	53000	Bharti Airtel, Videocon, Reliance
Indonesia	89887	AXIS, 3, Telkomsel, Indosat, XL Axiata
Italy	4880804	Wind
3424486444	Vodafone
» See SMS short codes for other countries

Jonathan Grynspan ‏@grynspan 5 Aug 2012

I want to use FileVault 2, but I don't want to allow someone to reset my password with my Apple ID. I want that separate. Help!
Michael Tsai ‏@mjtsai 5 Aug 2012

@grynspan It’s a separate option.
Jonathan Grynspan ‏@grynspan 5 Aug 2012

@mjtsai I've determined there's a bug that leaves it stuck in the "on" position if you're not careful when enabling FileVault 2.
Michael Tsai ‏@mjtsai 5 Aug 2012

@grynspan Wow.
Jonathan Grynspan ‏@grynspan 5 Aug 2012

@mjtsai Sarcastic wow?
Michael Tsai ‏@mjtsai 5 Aug 2012

@grynspan Surprised wow. If it just says “A recovery key has been set” hopefully that means I didn’t share it with Apple…
Jonathan Grynspan ‏@grynspan 5 Aug 2012

@mjtsai It says that in the FV2 prefs, of course. But during login there's still the option to reset your PW with an Apple ID. Which is bad.
Michael Tsai ‏@mjtsai 5 Aug 2012

@grynspan So the only way to check whether Apple has your recovery key is to fail a login and see whether it offers to reset for you?

‏@grynspan

@mjtsai Basically, if you've logged in once, attacker can use login screen 2 change your account PW w/Apple ID if they know the Apple ID PW.

11:13 AM - 5 Aug 2012

Jonathan Grynspan