This article shows how to reset the admin password:
http://www.cnet.com/uk/how-to/reset-bypass-password-mac-macbook/
This means that if you have physical access to a mac then security is a joke.
Macs are fundamentally insecure
Random outpourings of a software developer
Developer Rants 