SYNOPSIS:
Mike Lynn of Facebook and Rich Trouton join the pod’s very first Flashcast to talk about the #iamroot situation, a serious privilege escalation in Mac 10.13.0 – 10.13.2 beta 5 that allows password-free access to the root account. Solutions are discussed, as well as mitigation strategies for situations like this in the future.
YOUR HOSTS:
- Pepijn Bruienne, R&D Engineer at Duo Security [@bruienne], Proprietor of EnterpriseMac.Bruienne.com
- Tom Bridge, Partner at Technolutionary LLC [@tbridge]
- James Smith, IT Administrator at Culture Amp [@smithjw]
GUESTS:
- Mike Lynn, Client Platform Engineer, Facebook [@mikeymikey]
- Rich Trouton, [Der Flounder]
LISTEN!
LINKS & NOTES
Blocking logins to the root account on macOS High Sierra
Developer Forums Post from 13 November 2017 Describing This Behavior
Pycreateuserpkg from Greg Neagle
Apple KBase, updated 28 November 2017: How to enable the root user on your Mac or change your root password
RATE US ON ITUNES!
SPONSOR MAC ADMINS PODCAST!
If you’re interested in sponsoring the Mac Admins Podcast, please email podcast@macadmins.org for more information.
SOCIAL MEDIA
Get the latest about the Mac Admins Podcast, follow us on Twitter! We’re @MacAdmPodcast!
SYNOPSIS:
Heather Williams of Ruckus Wireless’ Global Field Enablement Team joins the pod to talk about Wi-Fi security in the wake of the KRACK attack.
YOUR HOSTS:
- Pepijn Bruienne, R&D Engineer at Duo Security [@bruienne], Proprietor of EnterpriseMac.Bruienne.com
- Tom Bridge, Partner at Technolutionary LLC [@tbridge]
- Charles Edge, Director of Professional Services, Jamf Software [@cedge318]
GUEST:
- Heather Williams, Solutions Engineer, Global Field Enablement Team, Ruckus Wireless [@MoBetterWiFi]
LISTEN!
LINKS & NOTES
Keep Calm and Wi-Fi On: A Common Sense Approach to an Uncommon Problem
Explaining KRACK: A Critical Attack Affecting A Wi-Fi Security Protocol
2017 Wi-Fi Trek: Session 8 – Heather Williams (Taking Blackhat Wireless)
COMMUNITY CALENDAR, SPONSORED BY WATCHMAN MONITORING
Conference Sites
Mac AD UK in Leicester Square, February 20-21, 2018
Brainstorm Wisconsin March 4-6, 2018
Brainstorm Sandusky May 6-8, 2018
MacDevOps YVR in Vancouver, June 2018
Meetups
Northeast Regional Apple Admins will meet on December 7th at the East Providence Public Library from 5:30 to 7:30pm.
Mac Admin Monthly, December 12th 4:30pm at Google in New York
Atlanta Apple Admins, December 21st 6:00pm at Brass Tap in Atlanta
Denver Mac Admins Meetup on January 11th 2018 in Centennial, CO at Rewind Technology
RATE US ON ITUNES!
SPONSOR MAC ADMINS PODCAST!
If you’re interested in sponsoring the Mac Admins Podcast, please email podcast@macadmins.org for more information.
SOCIAL MEDIA
Get the latest about the Mac Admins Podcast, follow us on Twitter! We’re @MacAdmPodcast!
SYNOPSIS:
François Levaux-Tiffreau joins the Pod to talk about SplashBuddy, being an open source contributor, and what it’s like consulting at the Enterprise level.
YOUR HOSTS:
- Pepijn Bruienne, R&D Engineer at Duo Security [@bruienne], Proprietor of EnterpriseMac.Bruienne.com
- Tom Bridge, Partner at Technolutionary LLC [@tbridge]
- Charles Edge
- Dr. Emily Kausalik, Systems Engineer, The Home Depot [@emilyooo]
- Charles Edge, Director of Professional Services, Jamf Software [@cedge318]
GUEST:
- François Levaux-Tiffreau, Senior Apple Consultant at Amaris [@ftiff]
TAKE THE LISTENER SURVEY!!
Help us get to know our audience a little better!
LINKS & NOTES
SplashBuddy
Culture First Onboarding
Jamf And…
Travis CI, Customizing the Build
THE BEST INFOSEC COMPANY IN THE WORLD (so they say) have supposedly broken Face ID
Putting iPhone X to the Twin Test
No, Apple doesn’t give away your Face ID data to 3rd party apps
MDM and the Kextpocalypse
Kextpocalypse 2: The Remediation
User Approved MDM, SimpleMDM
iOS 11.1.1 fixes autocorrect issue, much fun was poked at Apple
COMMUNITY CALENDAR, SPONSORED BY WATCHMAN MONITORING
Conference Sites
Mac AD UK in Leicester Square, February 20-21, 2018
MacDevOps YVR in Vancouver, June 8-9, 2018
Meetups
Macbrained YVR on November 23rd at Hootsuite
Franken Macadmins meetup on November 22nd at 6:30pm at Grüner Brauhaus Fürth at Theresienstrasse Ein, in Fürth, Germany. For more information, visit #franken-macadmins on the Mac Admins Slack.
RATE US ON ITUNES!
SPONSOR MAC ADMINS PODCAST!
If you’re interested in sponsoring the Mac Admins Podcast, please email podcast@macadmins.org for more information.
SOCIAL MEDIA
Get the latest about the Mac Admins Podcast, follow us on Twitter! We’re @MacAdmPodcast!
SYNOPSIS:
The hosts get together to talk news & notes, including User-Accepted Mobile Device Managers, and more.
YOUR HOSTS:
- Pepijn Bruienne, R&D Engineer at Duo Security [@bruienne], Proprietor of EnterpriseMac.Bruienne.com
- Tom Bridge, Partner at Technolutionary LLC [@tbridge]
- James Smith, IT Administrator at Culture Amp [@smithjw]
- Marcus Ransom, Professional Services Manager at Education Advantage [@marcusransom]
LISTENER SURVEY!
LINKS & NOTES
New UAKEL in 10.13.2 betas: Radar 1 Radar 2
Currently would prevent those devices added by, say, a QuickAdd in Jamf Pro, from being opted into SKEL environments. Has to be either a DEP device enrollment, or a user-permitted onboarding NOT via package, but by accepted Profile.
If you use both Jamf Pro QuickAdd AND Kernel Extensions, there is a bug to dupe because you may be affected.
DEP will imply user acceptance
Any other method of enrolling a Mac will prompt end user for approval
Apple to allow Apple IDs with third part email addresses to migrate to icloud, .mac, .me
AppleTV 4K beta change for resolution independence
End of Adobe + Dolby Licensing changes availability of some CC products
APFS Snapshots done at Software Updates
APFS snapshots can be restored in normal macOS 10.13 environment. Time Machine System Restore app is on the recovery partition.
HomeKit support for IKEA smart lighting
COMMUNITY CALENDAR, SPONSORED BY WATCHMAN MONITORING
Conference Sites
MacTech Conference in Los Angeles, CA on November 15-17 2017
Mac AD UK in Leicester Square, February 20-21, 2018
MacDevOps YVR in Vancouver, June 8-9, 2018
Meetups
Jamf User Group New York City will meet on Tuesday 11/14 at 4:30pm
Utah Mac Admins will meet Wednesday 11/15 at 11am at the Marriott Library at the University of Utah.
Atlanta Apple Admins on Thursday 11/16 at 6pm at SalesLoft
Macbrained YVR on November 22nd at Hootsuite
Franken Macadmins meetup on November 22nd at 6:30pm at Grüner Brauhaus Fürth at Theresienstrasse Ein, in Fürth, Germany. For more information, visit #franken-macadmins on the Mac Admins Slack.
Submit your own meetup with our new submission form!
RATE US ON ITUNES!
SPONSOR MAC ADMINS PODCAST!
If you’re interested in sponsoring the Mac Admins Podcast, please email podcast@macadmins.org for more information.
SOCIAL MEDIA
Get the latest about the Mac Admins Podcast, follow us on Twitter! We’re @MacAdmPodcast!