MacOS – Remote control and screenviewing on OS X

firewallmacosmalwareNetworkremote desktop

So I have a company Macbook and a co-worker recently told me that it can be controlled or viewed any moment.

Not that I do something illegal on it, I value my privacy and this piqued my interest so I wanted to know if this is indeed possible and how.

What I figured so far:

  1. Internet provider can easily see my outbound and inbound traffic so this is out of the question. As long as I'm in the office my traffic can be viewed.

  2. There's a bunch of options in the Sharing setting in System Preferences that allows remote login, access and screen viewing.

  3. There's an ESET Remote Administrator Agent running on my Mac.

  4. My Firewall is currently disabled.

As far as I understand, if I disable all options in point 2, I should be fine, right? Do I need to be concerned about ESET RAA or the disabled Firewall?

Best Answer

  1. This isn't exactly true. They can see the sites you visit but not what the content is if you're using HTTPS. This means that they can see you're checking your balance but not what your balance is.

    This also applies to company network traffic providing they're not doing MITM which they can't do without inserting their own certificate on your computer. I suggest checking the certificates installed on your machine in Keychain Access to see if there's a certificate installed.

  2. You can disable these to disable the relevant services from being accessed through the methods detailed in the information shown by clicking on each service. Disabling these won't prevent against third-party software installed on the machine providing similar functionality.

  3. Any third-party software could provide functionality such as remote access. I'm unfamiliar with this specific software but it may be a good idea to research exactly what specific software installed on your machine can do.

  4. You can re-enable the firewall, however be careful that this does not block any legitimate traffic that may be required by your work network.