<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Allen Pomeroy &#187; mac</title>
	<atom:link href="http://www.pomeroy.us/tag/mac/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.pomeroy.us</link>
	<description>IT security thoughts and personal stuff</description>
	<lastBuildDate>Sat, 28 Jan 2012 08:55:00 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
		<item>
		<title>Resetting user passwords in Mac OS X Leopard without Administrator</title>
		<link>http://www.pomeroy.us/2010/12/resetting-user-password-in-mac-os-x-leopard/</link>
		<comments>http://www.pomeroy.us/2010/12/resetting-user-password-in-mac-os-x-leopard/#comments</comments>
		<pubDate>Thu, 09 Dec 2010 05:20:30 +0000</pubDate>
		<dc:creator>apomeroy</dc:creator>
				<category><![CDATA[tech]]></category>
		<category><![CDATA[mac]]></category>
		<category><![CDATA[scripts]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://www.networkforensics.us/?p=161</guid>
		<description><![CDATA[For those odd times where you need to reset the password for a user on a Mac (OS X 10.5 Leopard) and you don&#39;t have access to the / an administrator account, this is a procedure that will work if you have physical access to the system and can reboot it. No boot DVD is [...]]]></description>
			<content:encoded><![CDATA[<p>For those odd times where you need to reset the password for a user on a Mac (OS X 10.5 Leopard) and you don&#39;t have access to the / an administrator account, this is a procedure that will work if you have physical access to the system and can reboot it. No boot DVD is needed if you can boot the system off the internal hard disk.</p>
<p>We boot into single user mode off the internal hard disk, then reset the target user password.</p>
<ol>
<li>Boot into single user mode (press Command-S at power on)</li>
<li>Check the root filesystem first<br />
		<code> fsck -fy </code></li>
<li>Mount up the root filesystem<br />
		<code> mount -uw / </code></li>
<li>Load system directory services<br />
		<code>launchctl load /System/Library/LaunchDaemons/com.apple.DirectoryServices.plist </code></li>
<li>Edit user information<br />
		<code>dscl . -passwd /Users/username password </code>(replace username with the targeted user and password with the new password)</li>
<li>Reboot then sign in with the new password.<br />
		<code>reboot </code></li>
</ol>
]]></content:encoded>
			<wfw:commentRss>http://www.pomeroy.us/2010/12/resetting-user-password-in-mac-os-x-leopard/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Apple Exemplifies Fine Software Engineering</title>
		<link>http://www.pomeroy.us/2010/04/apple-exemplifies-fine-software-engineering/</link>
		<comments>http://www.pomeroy.us/2010/04/apple-exemplifies-fine-software-engineering/#comments</comments>
		<pubDate>Wed, 28 Apr 2010 03:57:06 +0000</pubDate>
		<dc:creator>apomeroy</dc:creator>
				<category><![CDATA[tech]]></category>
		<category><![CDATA[mac]]></category>
		<category><![CDATA[tools]]></category>

		<guid isPermaLink="false">http://www.networkforensics.us/?p=114</guid>
		<description><![CDATA[So I&#8217;ve been a recent Apple user for a mere eight years, when I purchased my first iBook  running the new OS X (10.1). I&#8217;m a fan of the form engineering that goes several steps beyond the basic function engineering that is so prevalent in consumer technology these days. For Apple, it&#8217;s not good enough [...]]]></description>
			<content:encoded><![CDATA[<p>So I&#8217;ve been a recent Apple user for a mere eight years, when I purchased my first iBook  running the new OS X (10.1). I&#8217;m a fan of the form engineering that goes several steps beyond the basic function engineering that is so prevalent in consumer technology these days. For Apple, it&#8217;s not good enough that there&#8217;s windows, they have to <em>look good</em> too &#8211; like a master craftsman that puts finishing touches on the product rather than just slapping some cheap molding on and calling it done (or Windows).</p>
<blockquote><p><em><strong>This is too fine for words.</strong></em></p></blockquote>
<p>After working through successively newer notebooks (iBook, PowerBook, MacBook Pro), I have recently upgraded my first gen MacBook Pro to a new uni-body MBP. All the way through the online store (with the complication of being a grad student and navigating the education part of the online store), the process was pretty painless. But the real wow was when my new MBP showed up three weeks ago and I decided to use the Migrate function to just suck the contents of my old MBP to my shiny new uni-body MBP (thanks for the encouragement, Jonathan). I figured since I didn&#8217;t have the time or energy to setup another computer from scratch, I would try this migrate feature &#8211; with a heavy dose of battle earned skepticism. When I turned on the power on my new MBP, it seamlessly guided me through the setup .. and asked me if I wanted to migrate from an existing Mac or even a TimeMachine backup of a Mac.  I said yes, hooked the old and the new together .. fully expecting this to not end well and have to restart some install process.  Well a little while later, the migrate was done .. I restarted my new MBP (didn&#8217;t have to), and it looked <strong><em>exactly</em></strong> like my old MBP. All of my Applications were there. All my documents where there. iTunes was there. iPhoto was there. The positioning of the icons and documents on my desktop was <em><strong>exactly</strong></em> like my old MBP. Wow. A migrate function that actually worked.  Really. All the way.  Ok, well I did have to re-setup my home wireless connection .. for some reason that didn&#8217;t seem to come across, but with the totally customized settings I use, I&#8217;m not too surprised although it only added about 120 seconds onto my migrate time.</p>
<p>So at the time I&#8217;m writing this, Apple has announced the next generation of the MacBook Pro (the Intel i5 and i7 processors).  Since I&#8217;ve only had my shiny new uni-body MBP for a week, I call the folks at Apple and speak to a very pleasant customer service rep (send me an email or website message and I&#8217;ll forward his name), who not only cheerfully agrees to accept my new MBP back, but helps me order the new generation. They waived the return shipping and any refurbishment fees, as well as the express shipping for the new unit to me.  Gives me his direct line so if the Apple provided UPS return sticker expires before I get the old-new MBP migrated to the new-new MBP, I can call and get a new label. All this (and I ordered a new mouse) and they refunded a net of nearly $900 back to my credit card.</p>
<p>Well, I&#8217;ve just finished the migrate from the old-new MBP to my new-new MBP and again, it was seamless. I don&#8217;t think I&#8217;ll rebuild a new Mac from scratch any more &#8211; this is just too fine for words.  So I can get back to my Master&#8217;s thesis and life in general, and not worry about the software out there that is half baked or just barely good enough to get by .. with lots of manual care and feeding.</p>
<p>Thanks Steve and crew &#8211; this is why I&#8217;m an Apple shareholder.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.pomeroy.us/2010/04/apple-exemplifies-fine-software-engineering/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Accessing Ubuntu desktop from Mac Snow Leopard</title>
		<link>http://www.pomeroy.us/2010/02/accessing-ubuntu-desktop-from-mac-snow-leopard/</link>
		<comments>http://www.pomeroy.us/2010/02/accessing-ubuntu-desktop-from-mac-snow-leopard/#comments</comments>
		<pubDate>Sun, 07 Feb 2010 18:06:34 +0000</pubDate>
		<dc:creator>apomeroy</dc:creator>
				<category><![CDATA[tech]]></category>
		<category><![CDATA[linux]]></category>
		<category><![CDATA[mac]]></category>
		<category><![CDATA[tools]]></category>

		<guid isPermaLink="false">http://www.networkforensics.us/?p=109</guid>
		<description><![CDATA[Accessing my Ubuntu 9.04 Gnome desktop from the built in Mac OS X 10.6.2 VNC viewer took a bit of tweaking on the Ubuntu Gnome side. I have an OpenVPN SSL tunnel between the Mac and the Ubuntu desktop, however a SSH tunnel could also be used to protect the VNC session. In this post, [...]]]></description>
			<content:encoded><![CDATA[<p>Accessing my Ubuntu 9.04 Gnome desktop from the built in Mac OS X 10.6.2 VNC viewer took a bit of tweaking on the Ubuntu Gnome side.  I have an OpenVPN SSL tunnel between the Mac and the Ubuntu desktop, however a SSH tunnel could also be used to protect the VNC session.  In this post, I&#8217;ll just cover the VNC server setup assuming a secure connection between the Mac and the desktop.</p>
<p>Initially I followed the guidance at sanity, inc.&#8221;<a title="mac-screen-sharing-with-linux" href="http://www.sanityinc.com/articles/mac-screen-sharing-with-linux" target="_blank">How to OS X Leopard Screen Sharing with Linux</a>&#8220;, on Ubuntu I installed tightvnc:<br />
<code><br />
apt-get install tightvncserver<br />
</code><br />
Then tested it out by starting up the vnc server on the Ubuntu system as the user I want to run the remote session as:<br />
<code><br />
tightvncserver -geometry 1024x700 -depth 24 :1<br />
</code><br />
As tightvncserver starts up the VNC service, it will check for a .vncpasswd file in the user home directory.  If it doesn&#8217;t exist, you will be prompted for a password to use to protect the remote session.  Note VNC is not designed to be used for multi-user remote access.<br />
On the Mac, rather than use Bonjour to automatically discover the Ubuntu screen sharing service, I just referred to the VNC session directly within Finder  which invokes the built in VNC viewer. Enter the VNC session password when prompted and the Ubuntu desktop is displayed. <a href="http://www.nuclearserver.com/wp-content/uploads/2010/02/connect-to-server1.png"><img class="alignright size-full wp-image-112" title="connect-to-server" src="http://www.nuclearserver.com/wp-content/uploads/2010/02/connect-to-server1.png" alt="connect-to-server" width="316" height="86" /></a> Within Finder, either use Go -&gt; Connect to Server or Apple-K to bring up the Connect to Server window.  The server address is the URL that points to the Ubuntu VNC instance <code>vnc://10.10.1.2:5901</code> where the port is 5900 + the display number specified when starting up the tightvncserver (5901).</p>
<p>This all worked fantastic, except for the keyboard mapping within Gnome &#8211; it was scrambled.  After googling several possible solutions, the only one that was successful for me was to disable the keyboard plugin in Gnome<br />
<code><br />
<a title="gnome-keyboard-fix" href="https://bugs.launchpad.net/baltix/+source/tightvnc/+bug/112955">Amit Gurdasani  wrote on 2008-04-28:  	  #51</a></code></p>
<blockquote><p>I&#8217;ve also encountered this issue with TightVNC and the hardy release. My solution was to capture the xmodmap -pke output as ${HOME}/.Xmodmap at the login screen (DISPLAY=:0 XAUTHORITY=/var/lib/gdm/:0.Xauth sudo xmodmap -pke &gt; ${HOME}/.Xmodmap). When gnome-settings-daemon starts up and finds an .Xmodmap, it asks if it should be loaded &#8212; I answer yes. As a side effect, if gnome-settings-daemon were to be restarted without the .Xmodmap, it&#8217;d scramble the keyboard layout again. With an .Xmodmap in place, it&#8217;ll load the .Xmodmap every time.</p>
<p>Due to another issue (#199245, gnome-settings-daemon crashing with BadWindow every time a window is mapped), <em><strong>I disabled the keyboard plugin using gconf-editor, at /apps/gnome_settings_daemon/plugins/keyboard.</strong></em> Since it&#8217;s not being loaded, I suspect it might not garble the layout even if I remove the .Xmodmap now.</p>
<p>So maybe disabling the keyboard plugin is a better fix.</p></blockquote>
<p>On the Ubuntu system, invoke the Gnome configuration editor (gconf-editor on command line), then navigate to  apps -&gt; gnome_settings_daemon -&gt; plugins -&gt; keyboard  uncheck the Active keyword.  Kill the VNC daemon and relaunch it &#8211; problem fixed.<br />
<code><br />
pkill vnc<br />
tightvncserver -geometry 1024x700 -depth 24 :1<br />
</code><br />
Various methods exist to automatically start and kill the VNC server, but for now this will do it for me.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.pomeroy.us/2010/02/accessing-ubuntu-desktop-from-mac-snow-leopard/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Linux and Mac OS X bash_history nuggets</title>
		<link>http://www.pomeroy.us/2010/01/bash_history/</link>
		<comments>http://www.pomeroy.us/2010/01/bash_history/#comments</comments>
		<pubDate>Sat, 09 Jan 2010 17:42:20 +0000</pubDate>
		<dc:creator>apomeroy</dc:creator>
				<category><![CDATA[notes]]></category>
		<category><![CDATA[linux]]></category>
		<category><![CDATA[mac]]></category>
		<category><![CDATA[scripts]]></category>

		<guid isPermaLink="false">http://www.networkforensics.us/?p=103</guid>
		<description><![CDATA[Here&#8217;s some notable CLI entries that I refer to occassionally. You can also select the Notes category and you&#8217;ll get more specific topics such as Linux LVM and Mac OS X commands. Mac OS X: sudo /usr/sbin/sysctl -w net.inet.ip.fw.enable=1 sudo /sbin/ipfw -q /etc/firewall.conf sudo ifconfig en0 lladdr 00:1e:c2:0f:86:10 sudo ifconfig en1 alias 192.168.0.10 netmask 255.255.255.0 [...]]]></description>
			<content:encoded><![CDATA[<p>Here&#8217;s some notable CLI entries that I refer to occassionally. You can also select the Notes category and you&#8217;ll get more specific topics such as Linux LVM and Mac OS X commands.</p>
<p>Mac OS X:<br />
<code><br />
sudo /usr/sbin/sysctl -w net.inet.ip.fw.enable=1<br />
sudo /sbin/ipfw -q /etc/firewall.conf<br />
sudo ifconfig en0 lladdr 00:1e:c2:0f:86:10<br />
sudo ifconfig en1 alias 192.168.0.10 netmask 255.255.255.0<br />
sudo ifconfig en1 -alias 192.168.0.10<br />
sudo route add -net 10.2.1.0/24 10.3.1.1<br />
</code></p>
<p>Linux:<br />
rpm commands:<br />
List files in an rpm file<br />
<code>rpm -qlp package-name.rpm<br />
</code><br />
List files associated with an already installed package<br />
<code>rpm --query –-filesbypkg package-name<br />
</code></p>
]]></content:encoded>
			<wfw:commentRss>http://www.pomeroy.us/2010/01/bash_history/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Mac OS X 10.5 Command Line notes</title>
		<link>http://www.pomeroy.us/2009/06/mac-os-x-command-line-notes/</link>
		<comments>http://www.pomeroy.us/2009/06/mac-os-x-command-line-notes/#comments</comments>
		<pubDate>Mon, 22 Jun 2009 00:24:54 +0000</pubDate>
		<dc:creator>apomeroy</dc:creator>
				<category><![CDATA[notes]]></category>
		<category><![CDATA[mac]]></category>
		<category><![CDATA[scripts]]></category>

		<guid isPermaLink="false">http://blog.networkforensics.us/?p=81</guid>
		<description><![CDATA[Encrypted Filesystems with Sparse Bundles Mac OS X offers encrypted filesystems through sparse bundles.&#160; To mount up a sparse bundle, given the password used to create the bundle, use the hdiutil: hdiutil attach -verbose -readonly /path/to/sparse.bundle.directory This will mount up the sparse bundle located at the directory path specified.&#160; To unmount the sparse bundle, use: [...]]]></description>
			<content:encoded><![CDATA[<p><strong>Encrypted Filesystems with Sparse Bundles</strong><br />
	Mac OS X offers encrypted filesystems through sparse bundles.&nbsp; To mount up a sparse bundle, given the password used to create the bundle, use the hdiutil:</p>
<blockquote>
<p>hdiutil attach -verbose -readonly /path/to/sparse.bundle.directory</p>
</blockquote>
<p>This will mount up the sparse bundle located at the directory path specified.&nbsp; To unmount the sparse bundle, use:</p>
<blockquote>
<p>hdiutil detach /Volume/sparse.bundle.name</p>
</blockquote>
<p><strong>Adding entries to /etc/hosts</strong><br />
	Although simply editing /etc/hosts should work, there are times where the new entries may not be recognized, in these cases the OS X name cache daemon needs to be kicked:</p>
<blockquote>
<p>dscacheutil -flushcache</p>
</blockquote>
<p><strong>Mac OS X Hostnames</strong><br />
	Although you can change the hostname of your Mac OS X device through the System Control Panel -&gt; Sharing, the following command line can lock the name so DHCP and other dynamic networking protocols don&#39;t mess up your hostname (from <a href="http://ma.tt/2004/07/os-x-hostname/" title="http://ma.tt/2004/07/os-x-hostname/">RichardBronosky</a>):</p>
<blockquote>
<p>sudo hostname my-permanent-name</p>
<p>sudo scutil &ndash;set LocalHostName $(hostname)</p>
<p>sudo scutil &ndash;set HostName $(hostname)</p>
</blockquote>
<p><strong>Handy Command Lines</strong><br />
	Command line short cuts:</p>
<blockquote>
<p>pmset -g batt&nbsp;&nbsp;&nbsp;Show battery status</p>
</blockquote>
]]></content:encoded>
			<wfw:commentRss>http://www.pomeroy.us/2009/06/mac-os-x-command-line-notes/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Synchronizing directories</title>
		<link>http://www.pomeroy.us/2009/05/synchronizing-directories/</link>
		<comments>http://www.pomeroy.us/2009/05/synchronizing-directories/#comments</comments>
		<pubDate>Sun, 24 May 2009 17:46:52 +0000</pubDate>
		<dc:creator>apomeroy</dc:creator>
				<category><![CDATA[notes]]></category>
		<category><![CDATA[itunes]]></category>
		<category><![CDATA[mac]]></category>
		<category><![CDATA[scripts]]></category>

		<guid isPermaLink="false">http://blog.networkforensics.us/?p=67</guid>
		<description><![CDATA[Fast way to synchronize the content of your iTunes libraries &#8211; this doesn&#8217;t sync the playlists or any iTunes meta information (and you may need to perform an Add to Library .. to import any new content). This was just a quick and dirty way to sync up my iTunes downloads with another iTunes library [...]]]></description>
			<content:encoded><![CDATA[<p>Fast way to synchronize the content of your iTunes libraries &#8211; this doesn&#8217;t sync the playlists or any iTunes meta information (and you may need to perform an Add to Library .. to import any new content).  This was just a quick and dirty way to sync up my iTunes downloads with another iTunes library at home.  This assumes that you&#8217;ve opened up the ability to Remote Login (ssh) to the target Mac (topic for another time).</p>
<blockquote>
<pre>rsync -av -e ssh "Music/iTunes/iTunes Music/" ahull@10.20.1.103:"/Users/ahull/Music/iTunes/iTunes\ Music"</pre>
</blockquote>
]]></content:encoded>
			<wfw:commentRss>http://www.pomeroy.us/2009/05/synchronizing-directories/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

