Git Product home page Git Product logo

yontma-mac's Introduction

YoNTMA

YoNTMA (You'll Never Take Me Alive!) is a tool designed to enhance the protection of data encryption on laptops.

How It Works

YoNTMA runs as a status bar icon on FileVault-protected laptops. If the laptop is disconnected from AC power or wired Ethernet while the screen is locked, YoNTMA puts the system into hibernate. This prevents a laptop thief from accessing your encrypted data later via a DMA attack while the machine is still powered on and the encryption keys are in memory, and reduces the threat of a similar-style cold-boot attack.

Binaries

YoNTMA is available for Mac, and has been tested on 10.11, 10.10, 10.9 and a little bit on 10.8.

YoNTMA is also available for Windows, in another Github project.

How to Run

Open the .dmg file, and drag the application into your applications folder. Start the program, and a status bar icon will appear.

If you have not set the correct power management settings, it will prompt you to correct them. The application can do this if your provide your credentials, or you can do it yourself. If you do not have FileVault enabled, it will provide instructions for doing so.

You can Enable/Disable the application by clicking the Status Bar icon. Right Clicking or Double-Clicking will let you change the preferences (including have it start at login), access debugging information, and exit the application.

Requirements

The machine must have FileVault enabled and have certain power management settings set. The application will prompt if it does not detect that these settings are set properly.

Build Instructions

YoNTMA builds in XCode and has no outside dependencies.

Disclaimer

iSEC has written this tool and provides it to the community free of charge. While iSEC has conducted testing of the tool on different systems, it has not been tested on all models, hardware, or configurations. The software is being provided "as is" without warranty or support. iSEC does not assume liability for any damage caused by use of this tool.

If you experience issues with YoNTMA, you can uninstall it by deleting it from your Applications folder.

yontma-mac's People

Contributors

tomrittervg avatar

Stargazers

Alexandre Bento avatar d1n38h avatar  avatar Kevin Vance avatar John avatar Stefano Regosa deel avatar Douglas Vergotti avatar Laurynas Biveinis avatar Avétis KAZARIAN avatar Caleb Jasik avatar Jack avatar Sandro avatar  avatar Diogo Terremoto avatar SnowPenguin avatar Axel Nilsson avatar Daniel Verdugo avatar Sam avatar  avatar  avatar Marc avatar Tim Kersey avatar idoxtreme avatar Kevin.Y avatar Du Nguyen avatar undeadinu avatar  avatar Alexander van der Berg avatar Nyimbi Odero avatar Matjaž avatar Harrison Powers avatar Ricardo Pramana Suranta avatar greg0r_ avatar artiom avatar  avatar Mika Tuupola avatar Eugene avatar eg avatar  avatar  avatar Philipp Muens avatar Johann avatar Derek Liang avatar Marc Tamsky avatar Bill Mei avatar Carmelo Santana avatar  avatar Mike Myers avatar z00nx 0 avatar Minh-Triet Pham Tran avatar antonio nikishaev avatar Stefan Pilger avatar Matt Balza avatar Seanie Byrne avatar Kevin M. Gallagher avatar Kilian Koeltzsch avatar Jan Sowinski avatar Sebastian Mellen avatar  avatar Joe Puccio avatar Rodrigo Tassinari de Oliveira avatar Anton Cohen avatar Hassan Noueilaty avatar seán patrick john paul george ringo doran avatar Shaun Bentzen avatar Morgan Holland avatar  avatar Evadne Wu avatar Justin Mayer avatar Herman Slatman avatar Gianluca Varisco avatar Ilari Stenroth avatar Nishant Das Patnaik avatar Alex Sellam avatar Mikal avatar Gordo Lowrey avatar  avatar  avatar Lukas Šalkauskas avatar Nat Welch avatar Tilde avatar Jiansong Liu avatar James Milazzo avatar pleasego2help avatar  avatar Will avatar Lury avatar Aaron Burchfield avatar  avatar Ken Nickerson avatar Rory Byrne avatar Salomão Santiago avatar Micah Gates avatar Andrea Devers avatar Lee Ramsay avatar Emilio avatar Chris Vest avatar John D Pell avatar Raphael avatar Harro Müller avatar

Watchers

Laurynas Biveinis avatar Christopher Sass avatar  avatar evandrix avatar Jevin Sweval avatar Mikal avatar Minh-Triet Pham Tran avatar James Cloos avatar cara marie avatar  avatar  avatar Josh Yavor avatar  avatar Tōlvä avatar Chris Hozian avatar  avatar  avatar  avatar  avatar

yontma-mac's Issues

Brand new MacBooks aren't handled

From #2 (comment)

Receiving the same error with 1.0.1.

$ pmset -g cap
Capabilities for AC Power:
displaysleep
disksleep
sleep
womp
acwake
lidwake
halfdim
gpuswitch
standby
standbydelay
powernap
ttyskeepawake
hibernatemode
hibernatefile
autopoweroff
autopoweroffdelay
rogue:~ $ pmset -g | grep hibernatemode
hibernatemode 25
$ pmset -g | grep DestroyFVKeyOnStandby
DestroyFVKeyOnStandby 1
rogue:~ $ pmset -g | grep standbydelay
standbydelay 0
$ sysctl hw.model
hw.model: MacBook8,1

Unlock Twice

It should probably be documented that since YoNTMA puts your MacBook into hibernation, upon wake up you need to enter your password to unlock the drive. Next, if you don't have your settings just right, you'll need to enter your password a second time to log back into your account.

Any advice on the proper settings to keep the MacBook secure while only needing to enter your password once to get back in?

Enable/disable seems to have no effect

When I click the YoNTMA icon in the menu bar to enable/disable it, it doesn't seem to make any operational difference. When the app is disabled, I still have to enter my credentials twice (as referenced in issue 5). Am I missing something or does the functionality not work?

Trigger if Wifi/Bluetooth is Lost or Machine is not locked

Please add the option of losing wifi signal or loosing bluetooth signal if paired with a phone to run the script.

Additionally please create an option where if the computer is NOT locked but any of those conditions and power/ethernet loss to lock the computer automatically and execute the other tasks.

iPhone is detected as an physical ethernet adapter

In my opinion the iPhone shouldn't be considered a physical ethernet adapter in this case, because it defeats the idea of yontma, because if i tether and someone steals my MacBook and my iPhone the keys won't be destroyed.

Uninstall Documentation

I'd like to know how to revert the power management settings, aside from just putting the app in the garbage.

Intermittent Failure to Wake from Hibernation

System Info

  • OS X 10.10.3
  • YoNTMA Mac version 1.0.1
  • MacBook Air 6,2 (April 2014) 1.7GHz

I run two user accounts on this machine:

  1. User 1..
    • has FileVault unlock privileges. 🔐
    • is an administrator.
  2. User 2...
    • does not have FileVault unlock privileges. 🔒
    • is an administrator.

When waking my machine from hibernation, sometimes the machine is completely powered off. After pressing the power button to wake the machine, it makes the POST boot noise and dumps me back into User 1's account instead of resuming the session that should have hibernated.

Other things I have noticed...

  • This is less likely to happen if I use Fast User Switching to open the Login Window before hibernating my system. 👤
  • This is less likely to happen if my machine is sleeping for a short amount of time (more than an hour and I expect a fresh boot).
  • This happens from both User 1's and User 2's accounts on hibernate. 💤
  • This has been happening since I got this machine in February (I don't know which version of Yosemite).

I have no idea where to start digging in system logs to see if this is a problem with YoNTMA or another piece of software on my system, but I would love to help in any way that I can. I'm hoping that someone else has had this issue - I didn't see anything related in the repo issue list here after 4 months of consistent albeit intermittent behavior.

Dark Mode icons

I noticed that this application doesn't have dark mode (inverted color) icons for the new Dark Mode feature in Yosemite. Adding that would be great, as it is sometimes hard to see the icon when I am in dark mode.

Idea: on wake, if no known Wi-Fi networks

I've had this idea before and I don't know if it is any good or not, but it seems like it might be a good match for this app, so I thought I'd mention it here.

If your Mac wakes up and cannot find any previously-known Wi-Fi networks, check destroyfvkeyonstandby and hibernatemode and if they are not set to 1 and 25 respectively, then do:

sudo pmset -a destroyfvkeyonstandby 1 hibernatemode 25

sudo /sbin/shutdown -s now

ISTM that if someone steals your laptop when it is asleep in a bag, it might be in "regular sleep" (not "secure sleep"). Assuming that they are not Super Top Secret Spies who know all the best cracking/hacking/whatever techniques, they might just open it. This seems like it might increase the security in that situation. But it's possible that I'm missing some reason this is a dumb idea.

OS X 10.11.2 loses wifi connection and crashes after hibernate

YoNTMA configures OS X to put the hard disk to sleep when possible. Doing so causes OS X 10.11.2 to lose the wifi connection when I wake it back up. If the machine is hibernated for too long (seems to be ~1 hour or so), all apps crash when I wake it back up.

This is likely an issue with OS X - not with YoNTMA - but I was hoping anyone had found a solution to this problem?

Can't secure power settings

I have "Power settings are currently insecure". I click correct and give my password. It tells me "some errors remain unresolved". The power-settings message remains. I clicked the ? and entered those commands manually, without error. I click correct again, same thing.

Second lock screen freeze when waking

Sometimes, and I really can't figure out a pattern, the second lock screen (the 'regular' OS X lock screen after the grey hibernation one is unlocked) is frozen when it appears. The cursor never appears, and the machine doesn't respond to keypresses or trackpad movement, and it has to be hard rebooted. Fully loaded 11" MacBook Air 2013 running OS X 10.9.3. I've looked at Console but I can't really make head nor tail of it. Thanks.

Retina Icon

I already love this app, and this is an incredibly petty complaint (especially since I'm not a graphic designer myself), but we should totally get a 'retina' resolution icon for it. It'll look prettier in my status bar :)

Thanks iSEC!

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.