757 reputation
520
bio website
location http://www.maths.manchester.ac.uk/~burdges/
age 39
visits member for 3 years, 4 months
seen Mar 25 at 20:53

Feb
6
comment Mid 2009 Macbook Pro 5Ghz Wifi problem
What was your solution? I've a similar intermittent problem.
Jan
14
comment Email encryption options on an iPhone
Is oPenGP open source?
Jan
14
comment Is it possible to have GPL software in the Mac App Store?
VLC makes media far more accessible. It's good they were sticklers about the GPL there because weakening iOS's access to media helps discourage people from using iOS. If you want to use GPL code from a package that already exists on iOS in a commercial form to make a free form, then the developers are likely to let you use it. I.e. you aren't making iOS more usable, your making iOS less profitable to commercial developers. tl;dr It's politics!
Jan
14
comment Email encryption options on an iPhone
IPGMail is close source though. You should not trust closed source encryption tools.
Jan
2
comment Any details about the captive/public wifi login screen browser?
I now see the answer here too : apple.stackexchange.com/questions/45418/… Apparently 'Captive Network Assistant.app' actually doesn't save any cookies. Yey! discussions.apple.com/thread/3308224?start=15&tstart=0 I'd imagine one must change one's MAC address to do most things that one might wish to do by deleting cookies.
Oct
20
comment How do I install GCC via Homebrew?
Homebrew has package descriptions only for
Oct
19
comment What are pros and cons for MacPorts, Fink and Homebrew?
Excellent link! terrychay.com/article/macports-vs-homebrew.shtml Thank you!
Oct
19
comment How do I install GCC via Homebrew?
How so? To be honest, I dislike Homebrew mostly just because it lacks (a) package descriptions and (b) math packages. Overall MacPorts has maybe six times as many packages as Homebrew, but yeah it's the obscure packages that're missing. I'm happy with MacPorts overall, although obviously I wish they'd integrate with language package managers like CPAN, CTAN, Caball, etc.
Oct
19
comment How do I install GCC via Homebrew?
Why use Homebrew? MacPorts is good at managing multiple versions of compilers. And MacPorts can do anything that Homebrew can do.
Sep
28
comment Are Macs vulnerable to the Bash shellshock bug?
Ain't such a big deal but you guys are repeatedly saying things that're technically wrong. You cannot be 100% sure without doing more legwork. Apple might've done that legwork for their servers that remain up with firewall enabled before issuing their statement, but actually I doubt they did even that much. It's probably fine but one should still bust Apple's chops for being so painfully slow to fix their bash itself.
Sep
28
comment Are Macs vulnerable to the Bash shellshock bug?
Yes strings .. | grep SHELL is far more useful than bash, but not absolute. Imho nm -a ... | grep system is the most important, and exec helps too, but that's only for vanilla BSD, Linux, etc. software Apple's libraries offer different routines. Just use the Cocoa way for example : stackoverflow.com/questions/412562/…
Sep
28
comment Are Macs vulnerable to the Bash shellshock bug?
Not quite. One must review the symbols called by the library that otool -L /usr/libexec/bootpd reports that contains an exec call. And the strings command is pointless since environment variables determine the shell called. I'm impressed however that no liked library calls system.
Sep
26
comment Are Macs vulnerable to the Bash shellshock bug?
heh. SE edit boxes don't like the Mac's spelling corrector, always creates premature comments. Sorry about that. Anyways..
Sep
26
comment Are Macs vulnerable to the Bash shellshock bug?
I already mentioned that recompiling bash is overkill myself. The correct response for ordinary desktop uses is to turn on firewall and turn off sharing services OR to accept that they're trusting the firewall provided by their router. That's what my comment says. You single out a probably usually non-vulnerable server, ssh, and ignores that an awful lot of people doing rudimentary local web server with unknown active scripting.
Sep
26
comment Are Macs vulnerable to the Bash shellshock bug?
In fact, your answer is totally wrong!!! Ordinary ssh usage isn't vulnerable since you're already opening a shell, only ssh's restricted login command is vulnerable. Almost no Linux users even know about that, so like no Mac users do.
Sep
26
comment Are Macs vulnerable to the Bash shellshock bug?
As I said below, ALL servers should be assumed to call bash unless proven otherwise. And Mac OS X is full of privilege escalation exploits once you reach a shell.
Sep
26
comment Are Macs vulnerable to the Bash shellshock bug?
Apache modules, CGI scripts, etc. commonly call bash. Very effective hack right here : twitter.com/JZdziarski/status/515135854436962304 And even if your Apache configuration does not call bash under normal operation, no telling what an attacker can convince it to do.
Sep
26
comment Are Macs vulnerable to the Bash shellshock bug?
How do you know that? Initial advisory was a vulnerable DHCP client. And many articles speculate that Mac OS X and/or iOS DHCP clients might be vulnerable. All servers should be assumed to be vulnerable unless proven otherwise.
Sep
26
comment Are Macs vulnerable to the Bash shellshock bug?
There are likely privilege escalation risks from a guest account too. Who cares though? Any Mac OS X machines is extremely vulnerable once users get access, especially local users. It's server daemons that should scare you, not just sshd though, all server daemons.
Sep
26
comment Are Macs vulnerable to the Bash shellshock bug?
-1 Very wrong. There are many tools that use bash : Installation scripts usually use bash, creating privilege escalation risks. All servers should be assumed to use bash unless you know otherwise, not just sshd. In particular, apache could create a remote vulnerability using bash. etc.