Aaron Adams’s Blowhard Blog

Back to My Mac will apparently, by design, let a user control or observe your machine if they know your .Mac password, with no local password needed for the machine being controlled.

This is security 101 people:

1. Always use a strong password.
2. Once you have a strong password, never share it.

Could Back to My Mac be more secure? Yes. Is security only Apple’s job? No, it’s yours too. Don’t be the low-hanging fruit. Choose a strong password and keep it secret, always.