I wasn't questioning your reply being on or off topic, but rather why you don't reply to the thread from where you quoted the post from in that thread rather than posting it here creating a large hard to read almost broken thread. I know very well not to discuss possible moderation reports in the thread itself, thus why I'm posting and not reporting. If you'd like to post a rebuttal to this, please quote my post in full and not pick out little bits of it as any part of my posts taken out of context greatly distort their original message and twist things to make it appear that I have no idea what I'm talking about.
Got a tip for us?
Let us know
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Mavericks Support - EOL When?
- Thread starter Tucom
- Start date
- Sort by reaction score
I liked reading your post it seems to bring out the point that Apple is losing a hard earned position they have held with video and sound production studios for years. Sad to see them be such hard heads, and not seem to even care what their user base has to say. I have stated it before, somehow when an enterprise reaches the top of the ladder of success in their field, they just go to sleep up there and fall off. I bet MS is watching them very close.
Vulnerability CVE-2015-1130
Big thanks to Traverse for bringing this to my attention.
About the security content of OS X Yosemite v10.10.3 and Security Update 2015-004 states, for CVE-2015-1130:
CVE-2015-1130 : The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileges via unspecified vectors. suggests that only one version of the operating system is vulnerable.
Hidden backdoor API to root privileges in Apple OS X | (2015-04-09) suggests otherwise:
Three words: shame on Apple.
Tomorrow I'll raise a requisition for a notebook that will run something other than OS X.
Big thanks to Traverse for bringing this to my attention.
About the security content of OS X Yosemite v10.10.3 and Security Update 2015-004 states, for CVE-2015-1130:
"
Available for: OS X Yosemite v10.10 to v10.10.2
"
CVE-2015-1130 : The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileges via unspecified vectors. suggests that only one version of the operating system is vulnerable.
Hidden backdoor API to root privileges in Apple OS X | (2015-04-09) suggests otherwise:
"
Conclusion and recommendation
The Admin framework in Apple OS X contained a hidden backdoor API to root access for several years (at least since 2011, when 10.7 was released). The intention was probably to serve the System Preferences app and systemsetup (command-line tool), but there is no access restriction. This means the API is accessible (through XPC) from any user process in the system.
This is a local privilege escalation to root, which can be used locally or combined with remote code execution exploits.
Apple indicated that this issue required a substantial amount of changes on their side, and that they will not back port the fix to 10.9.x and older.
Our recommendation to all OS X users out there: Upgrade to 10.10.3 (or later). "
Conclusion and recommendation
The Admin framework in Apple OS X contained a hidden backdoor API to root access for several years (at least since 2011, when 10.7 was released). The intention was probably to serve the System Preferences app and systemsetup (command-line tool), but there is no access restriction. This means the API is accessible (through XPC) from any user process in the system.
This is a local privilege escalation to root, which can be used locally or combined with remote code execution exploits.
Apple indicated that this issue required a substantial amount of changes on their side, and that they will not back port the fix to 10.9.x and older.
Our recommendation to all OS X users out there: Upgrade to 10.10.3 (or later). "
Three words: shame on Apple.
Tomorrow I'll raise a requisition for a notebook that will run something other than OS X.
Well, I'm going to update my computer probably tomorrow because I have a few days of little work ahead. I'll also update my mother's Mac Mini. Since she just uses it for basic web browsing I want her to have all the patches necessary.
I don't abhor Yosemite, but I don't really care for it. I only hope 10.11 brings something good.
----
You know what? I think that security patch was a notable mention and I reported it to MacRumors as a tip, but nothing ever came of it.
BSD's graphics drivers are not that good so when you do/did try getting one with just an iGPU. When the system is built please let me/us know if the laptop will automatically sleep when the lid is closed. It's been about 18 months since I've run BSD on a portable and it was not fixed then.
Ot: Bsd
Gotcha. It'll make sense for me to post in the PC-BSD forum and then link from somewhere under https://forums.macrumors.com/showthread.php?p=20928233#post20928233
PC-BSD Forums - Profile of grahamperrin
Gotcha. It'll make sense for me to post in the PC-BSD forum and then link from somewhere under https://forums.macrumors.com/showthread.php?p=20928233#post20928233
PC-BSD Forums - Profile of grahamperrin
It works out of the box on OpenBSD, but does not work on FreeBSD -current on amd64 as of yet. I haven't tried NetBSD or Dragonfly. The only Apple hardware I'm running OpenBSD on is a PowerBook where suspend/resume is not supported, but it works fine on my 3 ThinkPads. I seem to recall it working on my 2011 MBP but I don't have that anymore.
SeedUntil
Light entertainment. In Terminal, run the following command –
– then use the first (or only) listing, with a defaults command, to get a date. Here, for example:
I visualise my Mac, twenty-eight years from now, counting itself down to a final attempt to join with The Creator. Good luck, V'Ger 10.9… after thirty years of submitting diagnostic information, you'll deserve some peace.
Light entertainment. In Terminal, run the following command –
ls -t ~/Library/Preferences/ByHost/com.apple.SubmitDiagInfo.*
– then use the first (or only) listing, with a defaults command, to get a date. Here, for example:
Code:
sh-3.2$ defaults read ~/Library/Preferences/ByHost/com.apple.SubmitDiagInfo.1B4C77AE-B80A-59F9-B5CB-7A86B7437D40.plist SeedUntil
(
12F45,
"2043-09-27 04:20:37 +0000",
0,
2
)
sh-3.2$I visualise my Mac, twenty-eight years from now, counting itself down to a final attempt to join with The Creator. Good luck, V'Ger 10.9… after thirty years of submitting diagnostic information, you'll deserve some peace.
You have until the release of 10.12, most likely in fall 2016, if you really want to drag it out until the end of Apple support. However, 10.11 might change your mind.
Could not agree more. I run a mid 2011 MBP and Mavericks runs the best by a mile. Yosemite is not useable on my MBP. Like to keep Mavericks for at least another year or until I buy a new rig.