Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

MacOS High Sierra

apple.com

Post reply on HN
Print view View original

281–290 of 630 posts

Re: MacOS High Sierra

#281

Post by j_s »

vetinari wrote: post #162
Tepix wrote: post #152

Earlier quoted context omitted.

Your typical Android phone calls home around 1200 times per day. Getting that number down to zero means making it pretty much unusable.

The difference between Android and Google Play Services/Google Apps Suite is, that the latter use Google servers and the former does not. If removing these apps makes Android unusable for you, it means you are hooked on or locked-in to them. Asking for open-sourcing the client parts will not help you anyway, because the server parts are still running on Google servers and you won't be able to replace them.

> the server parts are still running on Google servers and you won't be able to replace them

Not sure to what degree replacement is actually possible today, but microG is heading in that direction.

https://microg.org/ - a free software clone of Google’s proprietary core libraries and applications

· Google Play Services or Google Maps Android API (v2)

· Google Cloud to Device Messaging

· Google’s network location provider

Further discussion https://news.ycombinator.com/item?id=12864429 (Nov 2016) and other comments https://hn.algolia.com/?query=microg.org&sort=byDate&type=co...

Re: MacOS High Sierra

#282

Post by thefreeman »

altitudinous wrote: post #227
mvdwoord wrote: post #91

Does anybody have more information on this claim of a keychain vulnerability in High Sierra... just saw it fly past on Twitter. https://twitter.com/patrickwardle/status/912254053849079808 >on High Sierra (unsigned) apps can programmatically dump & exfil keychain (w/ your plaintext passwords) vid: https://player.vimeo.com/video/235313957 #smh

It doesn't seem like a real vulnerabilty to me - it is not remotely executable, it has to be run by a signed in user on the actual device. When you go to facebook.com, your device must surely decrypt the keychain to plaintext to prefill the password field so it can send your password to facebook.com - Thats how it works. So this seems like normal functionality to me, someone has just put it in a command line. Someone…

Yes, you are completely missing how the keychain works.

When you go to facebook.com, safari requests access to the facebook.com password via the keychain api. At which point you are supposed to be prompted by the OS, and if you allow it, the keychain api returns the decrypted password only for facebook.com.

The vulnerability being demonstrated is able to decrypt every password in your keychain, without prompting the user in any way.

Re: MacOS High Sierra

#283

Post by lloeki »

altitudinous wrote: post #227
mvdwoord wrote: post #91

Does anybody have more information on this claim of a keychain vulnerability in High Sierra... just saw it fly past on Twitter. https://twitter.com/patrickwardle/status/912254053849079808 >on High Sierra (unsigned) apps can programmatically dump & exfil keychain (w/ your plaintext passwords) vid: https://player.vimeo.com/video/235313957 #smh

It doesn't seem like a real vulnerabilty to me - it is not remotely executable, it has to be run by a signed in user on the actual device. When you go to facebook.com, your device must surely decrypt the keychain to plaintext to prefill the password field so it can send your password to facebook.com - Thats how it works. So this seems like normal functionality to me, someone has just put it in a command line. Someone…

There is already a CLI tool, albeit secured by a GUI prompt asking for permission:

    $ security find-internet-password -s www.facebook.com -g
This one seems to bypass asking for permission somehow.

Re: MacOS High Sierra

#284

Post by macintux »

pivo wrote: post #153
seanalltogether wrote: post #142

I'm assuming apple file system is only enabled if you do a fresh install right? Or is there an option to switch to it during the upgrade process?

My understand is (haven't tried it yet) that the conversion happens automatically but only if you have an SSD.

To be precise, a non-Fusion Drive SSD. Fusion Drives have been dropped for now.

Re: MacOS High Sierra

#285

Post by zeveb »

lern_too_spel wrote: post #260
tomp wrote: post #103

> Safari now uses machine learning to identify advertisers and others who track your online behavior, and removes the cross‑site tracking data they leave behind. > Safari now uses machine learning to identify advertisers and others who track your online behavior, and removes the cross‑site tracking data they leave behind I'm starting to like the business model of buying the product more and more. There was a recent t…

Nothing prevents you from using a competitor's core apps on Android. Those apps could be even better at stopping tracking than Apple's. On iOS, you're stuck with whatever maps or browser Apple decrees.

I think this is a really key point: on Android I have the option to install whatever software I like, from whomever I like. There are tradeoffs, of course, but I am free to choose between them.

On iOS, I wouldn't have that choice.

Re: MacOS High Sierra

#286

Post by SolarUpNote »

cjsuk wrote: post #2

Does anyone know of any issues with this before I press the button?

You won't be able to connect to a shared drive using AFP anymore, if you get the new file system APFS when you upgrade. Apparently you only get APFS if you have a pure SSD drive (not Fusion).

https://support.apple.com/en-gb/HT208018

  APFS and file sharing
  - Volumes formatted as APFS can't offer share points over the network using AFP. 
  - APFS supports SMB and NFS, with the option to enforce only SMB-encrypted share points.

Re: MacOS High Sierra

#287

Post by AsyncAwait »

oschrenk wrote: post #144

What keeps me from updating that I am confused about the way forward regarding FileVault & APFS. I currently have FileVault enabled as I need my drive to be fully encrypted (liability for my clients). I want my backups to be encrypted as well. But now APFS solves disk encryption on FS layer instead of going through CoreStorage. And I'm confused about the way forward for me. Is there some documentation that explains 1…

Like the other commenters here, I can confirm that the FileVault -> APFS transition went smoothly.

Re: MacOS High Sierra

#288

Post by fhood »

baby wrote: post #139

I love that they feature the HTC Vive for Virtual Reality. Looks like they understood what was the best headset :) I've been actively looking into developing games for the Vive, anyone has tried doing that on a macbook pro?

Also the most expensive one.

Re: MacOS High Sierra

#289

Post by fish_fan »

Gaelan wrote: post #246
baldfat wrote: post #199

Earlier quoted context omitted.

You mean the monopoly is due to Office and DirectX? There are plenty of alternatives still. I only use Outlook due to work but I could also get around that through several ways. Maybe we just have a different definition of monopoly? Definition: https://www.merriam-webster.com/dictionary/monopoly 1 :exclusive ownership through legal privilege, command of supply, or concerted action 2 :exclusive possession or control n…

I haven’t used OpenOffice much? But it feels much less polished than Office or iWork. I guess there’s Google Docs, but even that’s limited compared to even iWork. Is there anything actually decent that can be used for “Office” stuff on Linux?

Libre office and google docs more than do it for everyone I know.

Re: MacOS High Sierra

#290

Post by fred256 »

messe wrote: post #113
nsomaru wrote: post #104

Earlier quoted context omitted.

Remap single tap CAPS to ESC and when used in combination with another key or long-pressed - CTRL. This has changed the way I use my keyboard in vim and tmux. I'm doing this on Ubuntu, but there are ways to get it done on OSX too.

I have `jk` mapped to ESC in spacemacs, zsh and anything else I can set up to use vi keybindings. `jk` is essentially a no-op in vi, so rebinding it doesn't cause any issues while carrying the advantage that my fingers never have to leave the home row.

Out of curiosity, how do you type "Dijkstra" in that case?
Post reply on HN