Mac Admins Flashcast Special: The #iamroot Situation

Synopsis:

Mike Lynn of Facebook and Rich Trouton join the pod’s very first Flashcast to talk about the #iamroot situation, a serious privilege escalation in Mac 10.13.0 – 10.13.2 beta 5 that allows password-free access to the root account. Solutions are discussed, as well as mitigation strategies for situations like this in the future.

Your Hosts:

Guests:

Listen!

Links & Notes

The Tweet That Started It All

Blocking logins to the root account on macOS High Sierra

Developer Forums Post from 13 November 2017 Describing This Behavior

Pycreateuserpkg from Greg Neagle

Apple KBase, updated 28 November 2017: How to enable the root user on your Mac or change your root password

Rate Us On iTunes!

Give Us Five Stars!

Sponsor Mac Admins Podcast!

If you’re interested in sponsoring the Mac Admins Podcast, please email podcast@macadmins.org for more information.

Social Media

Get the latest about the Mac Admins Podcast, follow us on Twitter! We’re @MacAdmPodcast!

Episode 58: It’s Raining Shoes

Synopsis:

The hosts get together to talk news & notes, including User-Accepted Mobile Device Managers, and more.

Your Hosts:

Listen!

Listener Survey!

Take our Listener Survey!

Links & Notes

New UAKEL in 10.13.2 betas: Radar 1 Radar 2

Currently would prevent those devices added by, say, a QuickAdd in Jamf Pro, from being opted into SKEL environments. Has to be either a DEP device enrollment, or a user-permitted onboarding NOT via package, but by accepted Profile.
If you use both Jamf Pro QuickAdd AND Kernel Extensions, there is a bug to dupe because you may be affected.

Also new UAMDM

DEP will imply user acceptance
Any other method of enrolling a Mac will prompt end user for approval

Apple to allow Apple IDs with third part email addresses to migrate to icloud, .mac, .me

AppleTV 4K beta change for resolution independence

End of Adobe + Dolby Licensing changes availability of some CC products

APFS Snapshots done at Software Updates

APFS snapshots can be restored in normal macOS 10.13 environment. Time Machine System Restore app is on the recovery partition.

HomeKit support for IKEA smart lighting

Open Tradfri on Github

Community Calendar, Sponsored by Watchman Monitoring

Conference Sites


MacTech Conference in Los Angeles, CA on November 15-17 2017
Mac AD UK in Leicester Square, February 20-21, 2018
MacDevOps YVR in Vancouver, June 8-9, 2018

Meetups

Jamf User Group New York City will meet on Tuesday 11/14 at 4:30pm

Utah Mac Admins will meet Wednesday 11/15 at 11am at the Marriott Library at the University of Utah.

Atlanta Apple Admins on Thursday 11/16 at 6pm at SalesLoft

Macbrained YVR on November 22nd at Hootsuite

Franken Macadmins meetup on November 22nd at 6:30pm at Grüner Brauhaus Fürth at Theresienstrasse Ein, in Fürth, Germany. For more information, visit #franken-macadmins on the Mac Admins Slack.

Submit your own meetup with our new submission form!

Rate Us On iTunes!

Give Us Five Stars!

Sponsor Mac Admins Podcast!

If you’re interested in sponsoring the Mac Admins Podcast, please email podcast@macadmins.org for more information.

Social Media

Get the latest about the Mac Admins Podcast, follow us on Twitter! We’re @MacAdmPodcast!

Episode 57: Eric Williams, Mac@IBM, Live at JNUC

Synopsis:

Eric Williams, Engineering & Infrstructure Manager for the Mac@IBM team, joins our hosts live on the stage at the Jamf Nation User Conference. Taped in front of a live audience on October 24th.

Your Hosts:

  • Pepijn Bruienne, R&D Engineer at Duo Security [@bruienne], Proprietor of EnterpriseMac.Bruienne.com
  • Charles Edge, Director of Professional Services, Jamf Software [@cedge318]
  • Tom Bridge, Partner at Technolutionary LLC [@tbridge]
  • Dr. Emily Kausalik, Systems Engineer, The Home Depot [@emilyooo]
  • James Smith, IT Administrator at Culture Amp [@smithjw]

Guests

  • Eric Williams, Mac@IBM Engineering & Infrastructure Manager

Sponsored By:

This episode is brought to you by NoMAD, Duo Security and Technolutionary

Listen!

Links & Notes

Mac@IBM Highlights from JNUC 2015

Community Calendar, Sponsored by Watchman Monitoring

Conference Sites


MacTech Conference in Los Angeles, CA on November 15-17 2017
Mac AD UK in Leicester Square, February 20-21, 2018
MacDevOps YVR in Vancouver, June 8-9, 2018

Meetups

MacDMV will meet on Saturday, 10/28 at 12pm at Merriweather Post Pavilion

Northeast Regional Mac Admins will meet on Tuesday, 10/30 at 5:30pm at the Wild Colonial Tavern in Providence, RI.

Denver Mac Admins will meet on Thursday 11/9 at 7pm at Rewind Technology

Dallas Area Mac Admins will meet on Thursday, 11/9 at 6:30pm at Bottle Rocket Studios

Jamf User Group New York City will meet on Tuesday 11/14 at 4:30pm

Utah Mac Admins will meet Wednesday 11/15 at 11am at the Marriott Library at the University of Utah.

Atlanta Apple Admins on Thursday 11/16 at 6pm at SalesLoft

Macbrained YVR on November 22nd at Hootsuite.

Rate Us On iTunes!

Give Us Five Stars!

Sponsor Mac Admins Podcast!

If you’re interested in sponsoring the Mac Admins Podcast, please email podcast@macadmins.org for more information.

Social Media

Get the latest about the Mac Admins Podcast, follow us on Twitter! We’re @MacAdmPodcast!

Episode 54: The State of Higher Ed with Chris Miller

Synopsis

Chris Miller of Eanes ISD in Texas joins the team to talk about the current state of education technology, the role of the Mac and iOS, and how everything comes together. Later, we talk with Pepijn Bruienne of Duo Security about his latest paper on EFI firmware.

Your Hosts:

Guests

  • Chris Miller, Asst Director for Tech Services, Eanes ISD [@edtechchris]

After Party at Brit’s Pub!

After the October 24th live recording at JNUC, we’ll be hosting an After Party at Brit’s Pub, sponsored by Duo Security, Technolutionary and NoMAD! Come out and join us at Brit’s afterward for a beverage and some light refreshments.

RSVP today to guarantee your spot! This event will sell out!

Listen!

Links & Notes

The Apple of your EFI – Mac Firmware Security Research

Password does not sync to FileVault after unlock and change with Recovery Key.

A Tweet Thread On The Topic of FileVault in High Sierra

You Don’t Have To Convert SSD Volumes to APFS

Google Restor

Is DEP Down Or Just Me?

Community Calendar, Sponsored by Watchman Monitoring

Call for Presenters

Mac AD UK in Leicester Square, February 20-21, 2018

Conference Sites


Macsysadmin in Gothenburg, Sweden October 3-6 2017
JNUC in Minneapolis, MN October 24-26, 2017
MacTech Conference in Los Angeles, CA on November 15-17 2017

Meet-ups

Mac Admin Monthly will meet on 10/10 at Google in New York and by Google Hangout.

Denver Mac Admins will meet on 10/12 at Rewind Technology in Centennial.

Utah Mac Admins will meet on Wednesday, 10/14 at 11am MST

MacDMV will meet on Saturday, 10/28 at 12pm

Rate Us On iTunes!

Give Us Five Stars!

Sponsor Mac Admins Podcast!

If you’re interested in sponsoring the Mac Admins Podcast, please email podcast@macadmins.org for more information.

Social Media

Get the latest about the Mac Admins Podcast, follow us on Twitter! We’re @MacAdmPodcast!

Episode 51: Ed Marczak

Synopsis

Ed Marczak of Google joins us to talk about his story as a Mac Admin, as well as the many projects that Google has built, and also a lot of great history about MacTech Conference

Your Hosts:

Guests

  • Ed Marczak, MacOps team at Google [@marczak]

Sponsored by Jamf

Jamf Now

Listen!

Links & Notes

Radiotope

Speaking Professionally

Macysadmin 2013 – Ed Marczak “The Future”

Ed Marczak at MacDevOps: How To Fail

Simian
Cauliflower Vest
Micromdm
Santa

Zombies Run

Community Calendar, Sponsored by Watchman Monitoring

Conference Sites


Macsysadmin in Gothenburg, Sweden October 3-6 2017
JNUC in Minneapolis, MN October 24-26, 2017
MacTech Conference in Los Angeles, CA on November 15-17 2017

Meet-ups

Mac DMV 16th of September at noon at Tunnicliff’s Tavern in DC
University of Utah Mac Admins Wed, Sept 20th @ 11am MT in the Marriott Library, room 1705a.
Atlanta Apple Admins Thursday 21st September – venue TBD
Melbourne Apple Admins for Thursday 28th September at REA
#franken-macadmins Meetup in Nuremberg, Germany, next meeting is on 9/28, for more info visit us over at #franken-macadmins
Netherlands Apple Admins will meet Thursday 9/28 at 1:30, at LAI in Schiedam, the Netherlands

Rate Us On iTunes!

Give Us Five Stars!

Sponsor Mac Admins Podcast!

If you’re interested in sponsoring the Mac Admins Podcast, please email podcast@macadmins.org for more information.

Social Media

Get the latest about the Mac Admins Podcast, follow us on Twitter! We’re @MacAdmPodcast!