Der Flounder

MissTake makes a good point regarding MDM. Google around to learn more. I found this stackexchange entry which says "To clean up after removing MDM, you want to follow the steps for your hardware and your macOS level to erase and reinstall a clean OS. Also confirm the company or school has released the device serial number from enrollment if you are taking ownership of the device from them." https://apple.stackexchange.com/questions/442147/how-to-check-if-my-de… Also, this looks really helpful: https://derflounder.wordpress.com/2018/03/30/detecting-user-approved-m…

There is also user.template that lives in a directory. This file acts like a skel file and holds all the standard settings for new users created on that machine. This can be used to customize settings and folders. https://derflounder.wordpress.com/

Wow I never heard of beam sync or beamoff -- great tip! Googling for that found some other useful vm performance stuff. Looks like it might only work in older operating systems since El Capitan is based on Metal instead of OpenGL. https://www.reddit.com/r/macgaming/comments/3l3mp2/anyone_know_how_to_… https://derflounder.wordpress.com/2014/12/13/improving-yosemite-vm-per… http://www.insanelymac.com/forum/topic/302424-yosemite-on-vmware-unusa… http://www.chromescreen.com/disable-beamsync-at-osx-login/

Here's an article that has a review of the feature pointing out UX issues and recommends avoiding it. [1] [1]: https://derflounder.wordpress.com/2016/09/23/icloud-desktop-and-docume…

> I am not a coder (much), but I have to wonder if my experience is common in the coding world? It is, yes. Surely someone will come and tell you it doesn’t happen to them, but all that tells you is that it ostensibly isn’t universal, but still common enough you’ll find no end of complaints. > Maybe there are ways to avoid this (and others) pitfall with prompting? Prompting can’t help you with things not in the training set. For many languages, all LLMs absolutely suck. Even for simple CLI tools, telling an LLM you are on macOS or using the BSD version may not be enough to get them to stop giving you the GNU flags. Furthermore, the rsync change in macOS is fairly recent so there’s even fewer data online on it. https://derflounder.wordpress.com/2025/04/06/rsync-replaced-with-openr… > As it is, I do not see at all how LLMs could really save time on programming tasks without also costing more time dealing with its quirks. And that’s the best case scenario. It also happens that people blindly commit LLM code and introduce bugs and security flaw they cannot understand or fix. https://secondthoughts.ai/p/ai-coding-slowdown https://arxiv.org/abs/2211.03622

Could snapshots via tmutil be used to protect against this kind of thing on MacOS? [Creating, managing and using Apple File System snapshots for startup drive backups | Der Flounder](https://derflounder.wordpress.com/2019/05/08/creating-managing-and-usi…

Good to know. Not sure if this is still relevant but talks about how to use VMware Remote Console with free ESXi: https://derflounder.wordpress.com/2015/04/18/using-vmwares-standalone-… You can get VMware Remote Console from the App Store: https://apps.apple.com/ca/app/vmware-remote-console/id1230249825?mt=12 or at https://www.vmware.com/go/download-vmrc

> It sounds like there was a regression at some point You are continually asserting incorrect information about this topic. The behavior I describe where skipping iCloud setup causes FileVault setup screen to not be shown as always been the case. There has been no regression. Source: https://derflounder.wordpress.com/2014/10/25/new-filevault-2-enablemen…

It's not a bug in macOS, it's a security feature. However, you can use synthetic firmlinks to define arbitrary root-level paths that _are_ writable. See `man synthetic.conf` and check out https://derflounder.wordpress.com/2020/01/18/creating-root-level-direc… for an example usage. PS: It looks like nix has a PR open to test that solution here: https://github.com/NixOS/nix/pull/3212

This blog post[1] has a good explanation of ConfigData updates. The flag would appear to force the install of new Gatekeeper configuration updates. >To help distinguish Gatekeeper and XProtect updates from other updates in the software update feed, Apple marks them as being ConfigData updates. >Marking these updates as ConfigData cues the App Store to not display these as available software updates in the App Store’s list of software updates. These updates are meant to be under Apple’s control and to be as invisible as possible. [1] https://derflounder.wordpress.com/2014/12/27/managing-automatic-instal…

Myself and others blogged about solutions: https://www.rderewianko.com/10-13-root-password-oh-my/ https://derflounder.wordpress.com/2017/11/28/blocking-logins-to-the-ro…

https://derflounder.wordpress.com/2014/10/25/new-filevault-2-enablemen… It won't show up based on a number of criteria, your recollection may be correct but you may be running into this.

My understanding is that it is configurable on macOS by enabling destroyfvkeyonstandby. https://derflounder.wordpress.com/2014/02/12/power-nap-power-managemen…

It seems like when installing Nix, it needs to create a 'nix' directory in your root directory. While I haven’t tried installing Nix yet myself, I’m guessing this probably won’t work on OS X v10.11 El Capitan due to System Integrity Protection¹. You’ll have to temporarily turn it off² first before attempting to install Nix (and then optionally turn it back on after). ―――――― ¹ — https://derflounder.wordpress.com/2015/10/01/system-integrity-protecti… ² — http://www.madrau.com/support/support/srx_1011.html

https://support.apple.com/en-us/HT204899, https://en.wikipedia.org/wiki/System_Integrity_Protection, https://derflounder.wordpress.com/2015/10/01/system-integrity-protecti…

Depends on the password you still have to worry about that being cracked by brute force. http://derflounder.wordpress.com/2011/11/23/using-the-command-line-to-… http://derflounder.wordpress.com/2013/06/11/decrypting-filevault-2-on-…

As a Fusion user, it is interesting to me that Fusion appears to be getting ESXi/vSphere management capability: http://derflounder.wordpress.com/2014/07/04/vmware-fusion-technology-p…

There are ways to prevent DMA over firewire, and also Apple has been aware of and provided prevention methods (such as disabling firewire DMA when a firmware password is enabled) over the years. A good account of the current state of affairs is here: http://derflounder.wordpress.com/2012/02/05/protecting-yourself-agains… And a diagram of protection methods that do work: http://www.frameloss.org/2011/09/18/firewire-attacks-against-mac-os-li…

Is there a particular reason you’re not putting .zshrc in the user’s home folder ~/.zshrc? In any case, / root and /etc (to an extend) are part of the system volume (or rather the system volume snapshot if we want to be pedantic). With some exceptions Apple considers that fair game. There’s a bunch of symlinking and firmlinking done to make it look like one coherent whole but only the stuff on the data volume is safe. That said, if for whatever reason you need to put something in root you can create your own synthetic firmlink[0] with /etc/synthetic.conf. I believe some also reported success by simply making a subdirectory under /etc and use that instead but YMMV. hoakly goes into extensive detail with what changed with volumes on macOS (back in 2019 I believe): https://eclecticlight.co/2021/01/13/big-sur-boot-volume-layout/ 0: https://derflounder.wordpress.com/2020/01/18/creating-root-level-direc…

blah alot of yours are ai and javascript stuffs.. i love rss and i mainly use it to stay up to date on sysadmin stuff.. https://hnrss.org/frontpage https://news.ycombinator.com/showrss https://hnrss.org/ask https://hnrss.org/polls https://www.reddit.com/r/technology+SCCM+DNS+virtualization+talesfromt… http://decentsecurity.com/blog?format=RSS https://coffee-and-dreams.uk/feed.xml https://derflounder.wordpress.com/feed/ https://fedoramagazine.org/rss http://krebsonsecurity.com/feed/ https://krypted.com/feed https://www.malwaretech.com/feed https://managingosx.wordpress.com/feed/ https://matrix.org/blog/feed https://orowith2os.gitlab.io/feed.xml http://paradisefacade.com/?format=rss https://sinrega.org/index.xml http://eclecticlight.co/feed/ https://blog.vyos.io/rss.xml https://worldofmatthew.com/index.xml

Apple has done silent updates for Gatekeeper, the macOS code signing/file quarantine/light anti-malware framework ever since Yosemite. These are done silently unless you explicitly disable all updates and only show up as a visible item when you manually list updates using the softwareupdate command line tool, I think. AFAIK these are just config files and hash databases or similar. You can view the history of these installs by running softwareupdate --history | grep -E "^MRT|^Gatekeeper" I see an average of 2 updates per month. FWIW Apple can also mark something as visible (but install automatically) with a certain config file key. A blog mentions this as being done for patching the NTP bug from a while back: > Marking these updates as ConfigData cues the App Store to not display these as available software updates in the App Store’s list of software updates. These updates are meant to be under Apple’s control and to be as invisible as possible. > Meanwhile, an automatically installed software update like OS X NTP Security Update 1.0 shows up as a normal software update, but has extra keys in its catalog listing to mark it as a critical update whose automatic installation is set to occur as soon as possible. https://derflounder.wordpress.com/2014/12/27/managing-automatic-instal…