<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>A programmer&#039;s rants &#187; mac os x</title>
	<atom:link href="http://blog.andremedeiros.info/tag/mac-os-x/feed/" rel="self" type="application/rss+xml" />
	<link>http://blog.andremedeiros.info</link>
	<description>Random rants about code and life.</description>
	<lastBuildDate>Fri, 25 Sep 2009 10:40:45 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0.1</generator>
		<item>
		<title>When screen shots go bad</title>
		<link>http://blog.andremedeiros.info/2008/07/when-screen-shots-go-bad/</link>
		<comments>http://blog.andremedeiros.info/2008/07/when-screen-shots-go-bad/#comments</comments>
		<pubDate>Mon, 14 Jul 2008 12:47:19 +0000</pubDate>
		<dc:creator>changelog</dc:creator>
				<category><![CDATA[Rants]]></category>
		<category><![CDATA[application]]></category>
		<category><![CDATA[iphone]]></category>
		<category><![CDATA[itunes]]></category>
		<category><![CDATA[mac os x]]></category>
		<category><![CDATA[screen shot]]></category>

		<guid isPermaLink="false">http://blog.andremedeiros.info/?p=9</guid>
		<description><![CDATA[Browsing the iTunes App Store today, I found a priceless application that turns your iPhone into a flash light. Needless to say, I went on and checked the screen shots. So, without further ado, here they are: As Marcel Molina puts it, &#8220;I like that there are two screen shots for the Light app&#8220;. Nicely [...]]]></description>
			<content:encoded><![CDATA[<p>Browsing the iTunes App Store today, I found a priceless application that turns your iPhone into a flash light. Needless to say, I went on and checked the screen shots. So, without further ado, here they are:</p>
<p align="center">
<a href='http://blog.andremedeiros.info/wp-content/uploads/2008/07/itunesscreensnapz001.png'><img src="http://blog.andremedeiros.info/wp-content/uploads/2008/07/itunesscreensnapz001-300x203.png" alt="" title="Light on iTunes App Store" width="300" height="203" class="aligncenter size-medium wp-image-10" /></a></p>
<p>As Marcel Molina puts it, &#8220;<a href="http://twitter.com/noradio/statuses/857439549">I like that there are two screen shots for the Light app</a>&#8220;. Nicely said.</p>
]]></content:encoded>
			<wfw:commentRss>http://blog.andremedeiros.info/2008/07/when-screen-shots-go-bad/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Mac OS X &#8211; Epic Fail</title>
		<link>http://blog.andremedeiros.info/2008/06/mac-os-x-epic-fail/</link>
		<comments>http://blog.andremedeiros.info/2008/06/mac-os-x-epic-fail/#comments</comments>
		<pubDate>Thu, 19 Jun 2008 12:16:04 +0000</pubDate>
		<dc:creator>changelog</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[epic fail]]></category>
		<category><![CDATA[mac os x]]></category>
		<category><![CDATA[omgwtf]]></category>

		<guid isPermaLink="false">http://blog.andremedeiros.info/?p=6</guid>
		<description><![CDATA[While getting up to speed with Slashdot, I found an interesting article about a security breach on Mac OS X that allows user escalation through AppleScript. Trying it on the terminal works, but, as they say, the user needs to have physical access to the machine. So, Patrício suggested trying to access through SSH to [...]]]></description>
			<content:encoded><![CDATA[<p>While getting up to speed with Slashdot, I found an <a href="http://it.slashdot.org/it/08/06/18/1919224.shtml" target="_blank" title="Mac OS X Root Escalation Through AppleScript">interesting article about a security breach</a> on Mac OS X that allows user escalation through AppleScript.
<p>Trying it on the terminal works, but, as they say, the user needs to have physical access to the machine. So, Patrício suggested trying to access through SSH to see if it works, and it did.</p>
<p>Slashdot member <a href="http://slashdot.org/~goombah99" target="_blank">gombah99</a> posted a tip on how to neutralize it non-destructively:</p>
<div class="geshi no bash">
<ol>
<li class="li1">
<div class="de1"><span class="kw3">cd</span> <span class="sy0">/</span>System<span class="sy0">/</span>Library<span class="sy0">/</span>CoreServices<span class="sy0">/</span>RemoteManagement<span class="sy0">/</span></div>
</li>
<li class="li1">
<div class="de1"><span class="kw2">sudo</span> <span class="kw2">tar</span> -czf ARDAgent.app.gz ARDAgent.app</div>
</li>
<li class="li1">
<div class="de1"><span class="kw2">sudo</span> <span class="kw2">chmod</span> <span class="nu0">600</span> ARDAgent.app.gz</div>
</li>
<li class="li1">
<div class="de1"><span class="kw2">sudo</span> <span class="kw2">rm</span> -r ARDAgent.app</div>
</li>
</ol>
</div>
<p>Here&#8217;s to you, Apple Un^H^HSecurity Team!</p>
]]></content:encoded>
			<wfw:commentRss>http://blog.andremedeiros.info/2008/06/mac-os-x-epic-fail/feed/</wfw:commentRss>
		<slash:comments>6</slash:comments>
		</item>
	</channel>
</rss>

