<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	
	xmlns:georss="http://www.georss.org/georss"
	xmlns:geo="http://www.w3.org/2003/01/geo/wgs84_pos#"
	>

<channel>
	<title>— Jürgen Kreileder</title>
	<atom:link href="/articles/tag/apple/feed/" rel="self" type="application/rss+xml" />
	<link>/</link>
	<description>Software Engineer and Consultant</description>
	<lastBuildDate>Sat, 29 Oct 2016 01:51:00 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>
	hourly	</sy:updatePeriod>
	<sy:updateFrequency>
	1	</sy:updateFrequency>
	
<site xmlns="com-wordpress:feed-additions:1">5303222</site><image><title>Jürgen Kreileder</title><url>/jk-rss.jpg</url><link>/</link><width>144</width><height>114</height><description>Software Engineer and Consultant</description></image>	<item>
		<title>OS X Applications Insecurely Installing World-Writable Files</title>
		<link>/articles/os-x-applications-insecurely-installing-world-writable-files/</link>
					<comments>/articles/os-x-applications-insecurely-installing-world-writable-files/#comments</comments>
		
		<dc:creator><![CDATA[Jürgen Kreileder]]></dc:creator>
		<pubDate>Sun, 17 Jul 2011 23:15:02 +0000</pubDate>
				<category><![CDATA[Apple]]></category>
		<category><![CDATA[OS X]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[adium]]></category>
		<category><![CDATA[adobe]]></category>
		<category><![CDATA[emusic]]></category>
		<category><![CDATA[epson]]></category>
		<category><![CDATA[exploitable]]></category>
		<category><![CDATA[google]]></category>
		<category><![CDATA[hp]]></category>
		<category><![CDATA[lion]]></category>
		<category><![CDATA[osx]]></category>
		<category><![CDATA[permissions]]></category>
		<category><![CDATA[snow leopard]]></category>
		<category><![CDATA[telltale games]]></category>
		<category><![CDATA[world-writable]]></category>
		<guid isPermaLink="false">http://blog.blackdown.de/?p=586</guid>

					<description><![CDATA[Files, directories, and devices that are writable by any user (&#8220;world-writable&#8221;) on a multi-user system can be dangerous locally exploitable security holes. There are very few legitimate reasons for having world-writable files and directories on a system. Many UNIX and Linux systems actually have cron jobs that check for world-writable files. On Apple&#8217;s OS X<br />[&#8594; <a href="/articles/os-x-applications-insecurely-installing-world-writable-files/" class="more-link">Read the rest of this entry</a>]]]></description>
										<content:encoded><![CDATA[<p>Files, directories, and devices that are writable by any user (&#8220;world-writable&#8221;) on a multi-user system can be dangerous locally exploitable security holes. There are very few legitimate reasons for having world-writable files and directories on a system.</p>
<p>Many UNIX and Linux systems actually have <em>cron</em> jobs that check for world-writable files. On Apple&#8217;s OS X there is no such safeguard and many vendors do not seem to care about file permissions much at all. Several well-known applications are either installed with world-writable files or create them when used:</p>
<h4>World-writable files in system directories</h4>
<p>The following applications install world-writable files in shared directories (<code>/Applications</code>, <code>/Library</code>,&nbsp;&#8230;):</p>
<ul>
<li><strong>Adobe CS 4, CS 5:</strong> Some uninstallers + several files and directories in /Library/Application Support + various stuff in other locations</li>
<li><strong>Adobe Media Player:</strong> directory + some files in <code>Contents/Resources</code></li>
<li><strong>Adobe Flash Player:</strong> directories (including <code>AddIns</code> und <code>AddIns/airappinstaller</code>)</li>
<li><strong>Amazon MP3 Downloader:</strong> some directories</li>
<li><strong>EPSON</strong> (Scan, TWAIN data source, Easy Photo Print, &#8230;): pretty much everything, including <strong>executables</strong></li>
<li><strong>Eye-One Match 3:</strong> complete app, including <strong>executable</strong></li>
<li><strong>eMusic Download Manager:</strong> complete app, including <strong>executable</strong> and JavaScript (the application is based on Mozilla)</li>
<li><strong>Telltale games</strong>: complete apps including <strong>executable</strong> and libraries</li>
<li><strong>Apple OS X</strong>: some plist and cache files, including at least one <strong>LaunchDaemon plist file</strong></li>
<li><strong>Google+Growl Utility</strong> (not a Google product): whole app including <strong>executable</strong></li>
<li><strong>HP Scan Pro</strong> (plus supporting files): everything including <strong>executables</strong></li>
<li><strong>DivX Converter:</strong> resource files</li>
<li><strong>Apple Remote Desktop:</strong> some plist files</li>
<li><strong>Apple GarageBand:</strong> several plist and data files</li>
<li><strong>Apple ColorSync:</strong> some profiles</li>
<li><strong>Microsoft Office 2011:</strong> directory in /Library Application Support</li>
<li><strong>Elgato EyeTV:</strong> several plist files</li>
<li><strong>ABBYY FineReader Sprint 8.0:</strong> several data files</li>
<li><strong>ArcSoft</strong> (Connect Suite, MediaImpression 2): all files, including <strong>executables</strong></li>
<li><strong>Extensis Suitcase Fusion 2</strong>: all files, including <strong>executables</strong></li>
</ul>
<h4>World-writable files in user directories</h4>
<p>The following applications install world-writable files in user directories (<code>/Users/<em>$USER</em></code>):</p>
<ul>
<li><strong>GoogleGrowl.plugin</strong>: whole plugin including <strong>executable</strong></li>
<li><strong>3rd-party extensions for Apple Safari</strong>: some extensions (e.g. AdBlock) install world-writable files</li>
<li><strong>Apple iPhoto</strong>: the whole library seems to be world-writable</li>
<li><strong>Adium add-ons</strong>: several add-ons install world-writable files</li>
<li><strong>eMusic Download Manager:</strong>some preferences files are world-writable</li>
<li><strong>Adobe</strong> (CS 4, CS5, Flash, &#8230;): several preferences files</li>
<li><strong>Apple MobileDevice</strong>: crash logs are world-writable</li>
</ul>
<p>The lists have been compiled by inspecting my own systems and those of several friends by running</p>
<pre>sudo sh -c \
  "find / -xdev -perm +o=w ! \( -type d -perm +o=t \) ! -type l -print0 | \
   xargs -0 ls -dl 2&gt;&amp;1 | \
   tee world-writable-files.txt"</pre>
<p>and analyzing the output.</p>
<p>Note that running <em>Disk Utility</em>&#8216;s &#8220;Repair Disk Permissions&#8221; does not have any influence on the issues described here.</p>
<p>Most OS X installations are probably single-user systems in reality but the situation is still somewhat ugly.</p>
]]></content:encoded>
					
					<wfw:commentRss>/articles/os-x-applications-insecurely-installing-world-writable-files/feed/</wfw:commentRss>
			<slash:comments>2</slash:comments>
		
		
		<post-id xmlns="com-wordpress:feed-additions:1">586</post-id>	</item>
		<item>
		<title>Thoughts on Apple&#8217;s Magic Mouse</title>
		<link>/articles/thoughts-on-apples-magic-mouse/</link>
		
		<dc:creator><![CDATA[Jürgen Kreileder]]></dc:creator>
		<pubDate>Mon, 02 Nov 2009 19:53:17 +0000</pubDate>
				<category><![CDATA[Apple]]></category>
		<category><![CDATA[OS X]]></category>
		<category><![CDATA[magic mouse]]></category>
		<category><![CDATA[mouse]]></category>
		<category><![CDATA[multi-touch]]></category>
		<category><![CDATA[review]]></category>
		<guid isPermaLink="false">http://blog.blackdown.de/?p=330</guid>

					<description><![CDATA[A few random thoughts on Apple&#8217;s new multi-touch Magic Mouse: Apple killed the third mouse button! I am conditioned to open tabs in browsers with the a middle click, so this is quite some problem for me. (I still hoped for an Open-in-a-New-Tab gesture for Apple&#8217;s touch pads but I guess it is unlikely now.)<br />[&#8594; <a href="/articles/thoughts-on-apples-magic-mouse/" class="more-link">Read the rest of this entry</a>]]]></description>
										<content:encoded><![CDATA[<p>A few random thoughts on Apple&#8217;s new multi-touch <a href="http://www.apple.com/magicmouse/">Magic Mouse</a>:</p>
<ul>
<li>Apple killed the third mouse button!  I am conditioned to open tabs in browsers with the a middle click, so this is quite some problem for me.  (I still hoped for an Open-in-a-New-Tab gesture for Apple&#8217;s touch pads but I guess it is unlikely now.)</li>
<li>You have to press down the entire mouse to generate a click.  Not really new but on this mouse I instinctively try to use Tap-to-Click like on a touch pad.  It just does not work that way.  Bummer.</li>
<li>Right click still requires you to lift your left finger like with the <em>Mighty Mouse</em>.  This requires some time to get used to and also means that it is impossible to press both &#8220;buttons&#8221; at the same time.</li>
<li>Scrolling with one finger works fine but touch pad conditioning kicks in again here: I tend to try scrolling with two fingers.</li>
<li>There are no gestures for Exposé and Spaces.  Would have been nice.</li>
</ul>
<p>And it is flat.  Almost too flat for my hands.<br />
My conclusion is that Apple can always come up with interesting mouse concepts but still fails at actually building usable mice.</p>
]]></content:encoded>
					
		
		
		<post-id xmlns="com-wordpress:feed-additions:1">330</post-id>	</item>
		<item>
		<title>Contact Album Plug-In for Adium</title>
		<link>/articles/contact-album-plug-in-for-adium/</link>
					<comments>/articles/contact-album-plug-in-for-adium/#comments</comments>
		
		<dc:creator><![CDATA[Jürgen Kreileder]]></dc:creator>
		<pubDate>Mon, 19 Jan 2009 23:55:39 +0000</pubDate>
				<category><![CDATA[Apple]]></category>
		<category><![CDATA[OS X]]></category>
		<category><![CDATA[adium]]></category>
		<category><![CDATA[contact album]]></category>
		<category><![CDATA[osx]]></category>
		<category><![CDATA[plugin]]></category>
		<guid isPermaLink="false">http://blog.blackdown.de/?p=93</guid>

					<description><![CDATA[Something for the Mac users this time. I have written a little plug-in for Adium recently. It can be downloaded and installed from the Adium Xtras site. The plug-in, called Contact Album, stores all the icons that your contacts use over time and comes with a viewer for the icons. After installation of the plug-in,<br />[&#8594; <a href="/articles/contact-album-plug-in-for-adium/" class="more-link">Read the rest of this entry</a>]]]></description>
										<content:encoded><![CDATA[<p>Something for the Mac users this time.  I have written a little plug-in for <a href="http://www.adiumx.com/">Adium</a> recently.<br />
It can be downloaded and installed from the <a href="http://www.adiumxtras.com/index.php?a=xtras&#038;xtra_id=6409">Adium Xtras</a> site.</p>
<p>The plug-in, called <em>Contact Album</em>, stores all the icons that your contacts use over time and comes with a viewer for the icons.</p>
<div style="width: 410px" class="wp-caption alignnone"><a href="/static/osx/adium/Contact%20Album.png" rel="lightbox" title="The Contact Album Viewer"><img width="400px" alt="The Contact Album Viewer (click for larger view)" src="/static/osx/adium/Contact%20Album.png" title="Contact Album Viewer" /></a><p class="wp-caption-text">click for larger view</p></div>
<p>After installation of the plug-in, the album will slowly fill with icons as your contacts change them.  You can open the album viewer with the <em>Contact Album</em> entry in Adium&#8217;s <em>Window</em> menu and with the <em>View Album</em> entry in the context menu for contacts.<br />
Currently the plug-in comes with English, Dutch, Finnish, French, German, Portuguese, and Swedish localizations.  Further translations are welcome.</p>
<p>Install the plug-in: <a href="adiumxtra://www.adiumxtras.com/download/6409">Contact Album</a><br />
Please note that the plug-in requires Adium 1.3 or newer and Mac OS X 10.5 Leopard.</p>
<p><small style="color:black;">Get the <a href="https://git.blackdown.de/contactalbum.git">source code</a>. It&#8217;s available under the GNU General Public License, version 2.</small></p>
]]></content:encoded>
					
					<wfw:commentRss>/articles/contact-album-plug-in-for-adium/feed/</wfw:commentRss>
			<slash:comments>22</slash:comments>
		
		
		<post-id xmlns="com-wordpress:feed-additions:1">93</post-id>	</item>
		<item>
		<title>Apple Praise</title>
		<link>/articles/apple-praise/</link>
					<comments>/articles/apple-praise/#comments</comments>
		
		<dc:creator><![CDATA[Jürgen Kreileder]]></dc:creator>
		<pubDate>Wed, 13 Jun 2007 22:34:42 +0000</pubDate>
				<category><![CDATA[Apple]]></category>
		<guid isPermaLink="false">http://blog.blackdown.de/2007/06/14/apple-praise/</guid>

					<description><![CDATA[Here is a quick follow-up to my recent rant about Apple: After a few more emails and phone calls, I will be the proud owner of a MacBook Pro with a US keyboard soon. I still don&#8217;t understand why it is so problematic to get a US keyboard from Apple as a German customer. Anyway,<br />[&#8594; <a href="/articles/apple-praise/" class="more-link">Read the rest of this entry</a>]]]></description>
										<content:encoded><![CDATA[<p>Here is a quick follow-up to my recent <a href="/2007/06/08/apple-rant/">rant</a> about <a href="http://www.apple.com/">Apple</a>: After a few more emails and phone calls, I will be the proud owner of a MacBook Pro with a US keyboard soon.</p>
<p>I still don&#8217;t understand why it is so problematic to get a US keyboard from Apple as a German customer. Anyway, I am happy now!</p>
]]></content:encoded>
					
					<wfw:commentRss>/articles/apple-praise/feed/</wfw:commentRss>
			<slash:comments>2</slash:comments>
		
		
		<post-id xmlns="com-wordpress:feed-additions:1">55</post-id>	</item>
		<item>
		<title>Apple Rant</title>
		<link>/articles/apple-rant/</link>
					<comments>/articles/apple-rant/#comments</comments>
		
		<dc:creator><![CDATA[Jürgen Kreileder]]></dc:creator>
		<pubDate>Fri, 08 Jun 2007 00:12:20 +0000</pubDate>
				<category><![CDATA[Apple]]></category>
		<category><![CDATA[rant]]></category>
		<guid isPermaLink="false">http://blog.blackdown.de/2007/06/08/apple-rant/</guid>

					<description><![CDATA[I want one of those new MacBook Pros. I want one with a US keyboard! Unfortunately Apple seems to be unable to provide US keyboards to European customers :&#160;( The German webstore offers an International-English keyboard but that is different from US style keyboards: narrow Return key, additional key between left Shift and Z. Several<br />[&#8594; <a href="/articles/apple-rant/" class="more-link">Read the rest of this entry</a>]]]></description>
										<content:encoded><![CDATA[<p>I want one of those new <a href="http://www.apple.com/macbookpro/">MacBook Pros</a>.</p>
<p>I want one with a US keyboard!</p>
<p>Unfortunately Apple seems to be unable to provide US keyboards to European customers :&nbsp;(</p>
<p>The German webstore offers an International-English keyboard but that is different from US style keyboards: narrow <code>Return</code> key, additional key between left <code>Shift</code> and <code>Z</code>.</p>
<p>Several phone calls and emails didn&#8217;t help: No US keyboards for German users!</p>
<p>I never had this problem with other notebook manufacturers like Dell, Toshiba, and IBM. It can&#8217;t be that hard to put a different keyboard on that thingie when assembling it.</p>
<p><em><strong>June 14th, 2007:</strong> Also read the follow-up to this post: <a href="/2007/06/14/apple-praise/">Apple Praise</a> :&nbsp;)</em></p>
]]></content:encoded>
					
					<wfw:commentRss>/articles/apple-rant/feed/</wfw:commentRss>
			<slash:comments>4</slash:comments>
		
		
		<post-id xmlns="com-wordpress:feed-additions:1">54</post-id>	</item>
	</channel>
</rss>
