Live data from Hacker News

Logs in High Sierra Show Plaintext Password for APFS Encrypted External Volumes

mac4n6.com

81–90 of 123 posts

Re: Logs in High Sierra Show Plaintext Password for APFS Encrypted External Volumes

#81
post #3

Earlier quoted context omitted.

It’s appallingly sloppy. I can’t say I’m regretting my switch to essentially holding off on major OS upgrades until just before the next one is released. I wish Xcode’s current version still supported the most recent two OS versions, though.

how do you deal with the constant update prompts? ignoring them, or is there some defaults system key that can be used to turn them off?

[deleted]

Re: Logs in High Sierra Show Plaintext Password for APFS Encrypted External Volumes

#82
post #32
post #22

Earlier quoted context omitted.

Yeah, they just deployed a whole new FS to 100s of millions of users, in record time, with almost zero incidents. Hardly any new features...

What new features do users gain from the new file system?

Certainly not transparent file system compression. Can save developers couple 10 GBs but hey (source code, binaries, debug symbols, all compress nicely).

Re: Logs in High Sierra Show Plaintext Password for APFS Encrypted External Volumes

#83
post #55
post #6

That's pretty bad. It's been known for decades on other Unix systems that you shouldn't pass passwords by command line parameter, or even support doing so. I guess no-one told Apple.

Not to disagree, but could you provide some references to the statement?

If you run the ps command you can see all processes with all the command line arguments. They’re not secret, which is why you shouldn’t put passwords there.

Now typically these processes only run for a short time so it’s difficult to catch passwords manually but it’s predictable so a script can.

Re: Logs in High Sierra Show Plaintext Password for APFS Encrypted External Volumes

#84
post #58

What exactly happened to macOS development at Apple? There's always bad luck but Apple has had multiple very visible and very serious vulnerabilities over the last few quarters. They've made multiple grave errors with encrypted volumes. I don't think Microsoft with Bitlocker or Linux with dm-crypt has ever made mistakes as bad as Apple has made here and multiple other times. Forget the stability issues, a lot of the…

This is not really new. Apple's file vault passwords could be greped from the page file for many, many years, for example.

There is just more reporting of security incidents and more customer awareness.

Re: Logs in High Sierra Show Plaintext Password for APFS Encrypted External Volumes

#85
post #32

Earlier quoted context omitted.

What new features do users gain from the new file system?

The main feature is that it is a modern filesystem that doesn’t carry around 25 years of baggage.

That doesn't mean anything other than "it's new which is somehow better."

Re: Logs in High Sierra Show Plaintext Password for APFS Encrypted External Volumes

#86
post #58

What exactly happened to macOS development at Apple? There's always bad luck but Apple has had multiple very visible and very serious vulnerabilities over the last few quarters. They've made multiple grave errors with encrypted volumes. I don't think Microsoft with Bitlocker or Linux with dm-crypt has ever made mistakes as bad as Apple has made here and multiple other times. Forget the stability issues, a lot of the…

You don't even need to look at security vulnerabilities to wonder what happened to macOS development at Apple. My wife recently bought a mighty mouse. It worked for a few days, but then macOS would fail to associate with it via Bluetooth unless it's plugged in via the lightning cable, in which case it's unusable, the connector being on the side that normally sits on the table. Anyways, after a quick Google, I found a…

There are other problem known for years and no fix in sight. ( Last time I checked )

Having Whatsapp Backup using iCloud Drive ( By Default ) and using iCloud on Mac would means you download (cache) these iCloud content on your Mac, and you would be downloading 10s GB of Whatsapp backup to your Mac, every single day if you have Whatsapp set to auto.

It is not a problem if you have an fast internet connection and you wouldn't feel the difference. If you have a slow connection your Internet will literally come to a halt. Even worst if your internet connection is dependent on 4G.

Imagine 10M Whatsapp user are also a Mac user. Even at 1GB per backup, that is 10PB /Day wasted.

Re: Logs in High Sierra Show Plaintext Password for APFS Encrypted External Volumes

#87
post #58

What exactly happened to macOS development at Apple? There's always bad luck but Apple has had multiple very visible and very serious vulnerabilities over the last few quarters. They've made multiple grave errors with encrypted volumes. I don't think Microsoft with Bitlocker or Linux with dm-crypt has ever made mistakes as bad as Apple has made here and multiple other times. Forget the stability issues, a lot of the…

My theory: the NeXT developers who were around for osx v10.0 and around then have all retired.

I understand what you're trying to say but still, 10.0 was quite unusable at the time due to performance and stability issues ;-)

Re: Logs in High Sierra Show Plaintext Password for APFS Encrypted External Volumes

#89
post #22

Earlier quoted context omitted.

Yeah, they just deployed a whole new FS to 100s of millions of users, in record time, with almost zero incidents. Hardly any new features...

> new FS [...] in record time That's an odd brag. I might be from a bygone era but it used to be the case that filesystems were particularly conservative and rollouts equally so. Getting one deployed in "record time" is hardly difficult because everyone else is so conservative it can take tens of years in some cases. Look at Microsoft's ReFS, available in Server 2012, 2012 R2, Windows 8.1, Server 2016 and Windows 10…

> I like my filesystems like I like my Toyota, reliable.

Not sure if you're deliberately joking or not, but the quality of software in Toyota cars is hilariously awful.

There was a stunning writeup by one of the people who got source code to investigate the unintended acceleration issue a few years back. [1]

IIRC, as part of the cruise control, if they decided the car was going too slow it'd be given a command to accelerate. There was a second process which checked the speed, and once the car was going fast enough, it'd kill the accelerate process. Except the check/kill process would regularly crash, so the car would be told to accelerate and then nothing would be there to tell it to stop. Don't worry though, there's a software watchdog process to catch this! Except the watchdog ran under the same process manager as the check/stop script, so when the stop script crashed it'd take the watchdog process down too - and this was only the top of the iceburg when it came to problems.

tldr: software quality in Toyota's was abysmal and there's little reason to believe it's gotten fundamentally better.

[1] https://users.ece.cmu.edu/~koopman/pubs/koopman14_toyota_ua_...

[1.5] Actual Talk: https://betterembsw.blogspot.co.uk/2014/09/a-case-study-of-t...

Re: Logs in High Sierra Show Plaintext Password for APFS Encrypted External Volumes

#90
post #43
post #36

Earlier quoted context omitted.

being able to duplicate a 1GB directory in an instant

Is that a new feature? Isn't that just a performance improvement?

It is most certainly a new feature.

APFS is copy-on-write, so when you duplicate a folder, it happens instantly regardless of how big it is because it doesn't have to make a copy until you start modifying the files. Moreover, because of COW, duplicate folders don't take up any extra hard-drive space. I literally just duplicated a 100 gigabyte folder to test, it completed instantly and I'm not using any more drive space than I was before. It will only start using drive space if i start modifying the files.

APFS is seriously cool (there are many other features besides this). It's not revolutionary (ZFS and Btrfs did all this before), but it's miles past HFS+. Apple has needed a new filesystem for more than a decade, and I'm glad it has finally happened, even if the OS update that brought it sucks pretty badly.

Post reply on HN