JOHNNY DOETHE LIFE WHISPERER

Macs shipping with remote access by default.

Wellington

replies
1
views
83
WellingtonHigh-Ranking OperativeAuthor
Joined
Nov 2020
Messages
3,599

#1

Noticed two activities on my activity monitor earlier -> ClassRoom x1 x 2

Did some research into it, it's a tool that ships with education macs but apparently is also being shipped with non-education macs, (m2 in my case).

Anyway it gives complete authorisation for remote access to a mac.

Considering the data we have and the internal coms/business ops are accessible -> this is quite disturbing, i'd imagine a lot of people that use macs in their commercial (legitimate) activities would likewise be concerned.

Anyway this reportedly kills it, might be worthwhile others checking theirs.

apple.stackexchange.com/questions/429638/how…entd-process
Just closing it won't solve... the fucking thing is installed as a daemon, no app or management elsewhere, and all it does is send data to remote servers constantly.

0xDEADBEEFActive Recruit
Joined
Dec 2023
Messages
330

#2

The file you would need to modify for complete deletion is not accessible due to System Integrity Protection (SIP). Disabling SIP is substantially worse than just letting studentd run.

In your terminal:
Code:
cd ~/Library/studentd
Code:
plutil -convert xml1 AdHocConfiguration.plist
Code:
nano AdHocConfiguration.plist
then set AutoAssistEnabled to <false/> instead of <true/>.
Code:
plutil -convert binary1 AdHocConfiguration.plist

More in Mentor Group Gold

All 1,017 threads

  1. Diamonds as investment!

    Houdini · 7 replies · last 2 Sep 2025

  2. THE 2025 ZERO-TAX RESIDENT’S PLAYBOOK FOR AN ESTONIAN OÜ

    ActionMan · 5 replies · last 24 Aug 2025

  3. You need a real address and director for a UK LTD?

    JohnLocke · 51 replies · last 15 Aug 2025

  4. CRS reporting of vIBAN?

    polka · 2 replies · last 14 Aug 2025

True power moves in silence.

Begin application