Continue reading »]]> In my last post I described a VB Script for moving IMAP email from my inbox to an archive folder. As an interesting Apples to Oranges (or Apple to Microsoft?) comparison here is the Apple Script I use with Entourage to perform the same task. I will post two versions: one that performs the exact same task and a second version that is significantly longer that integrates with the popular Growl notification system for OS X. I would just like to highlight the overall simplicity and elegance of the Apple Script vs. the VB script. Yes I know their history is totally different and perhaps VB script is overloaded in usage these days but the point stands: the Apple Script is readable and intuitive while the VB script is neither.

Once again I apologize for the formatting but WordPress is butchering <code> posts lately and insert all sorts of uglies inside the code blocks and I don’t feel like fixing it at the moment.

tell application “Microsoft Entourage”
set acctName to “BA”
set folderName to “Archives”
set destFolder to null

set currMsgs to (current messages)
set currCount to (count of currMsgs)

if currCount is not 0 then
set folderList to folders of IMAP account acctName
repeat with x in folderList
if name of x is folderName then
set destFolder to x
move currMsgs to x
end if
end repeat
end if
end tell

And the second with Growl support:

tell application “GrowlHelperApp”
set the allNotificationsList to {“General”, “Move message”, “Error”}
set the enabledNotificationsList to {“General”, “Move message”, “Error”}

register as application “Entourage AppleScripts” all notifications allNotificationsList default notifications enabledNotificationsList icon of application “Microsoft Entourage”

if currCount is 0 then
notify with name “Error” title “Entourage Error” description “You attempted to move a message but no message was selected.” application name “Entourage AppleScripts”
delay 10
return
end if
if destFolder is null then
notify with name “Error” title “Entourage Error” description (“You attempted to move a message but the destination folder \”" & folderName & “\” is not valid.”) application name “Entourage AppleScripts”
delay 10
return
end if

– 1 Notification…
if currCount is 1 then
notify with name “General” title (acctName & ” Notification”) description (“1 message moved to \”" & name of destFolder & “\” folder of account \”" & acctName & “\”") application name “Entourage AppleScripts”
delay 10
end if

– Multi Notification…
if currCount > 1 then
notify with name “General” title (acctName & ” Notification”) description (“” & (count of currMsgs) & ” messages moved to \”" & name of destFolder & “\” folder of account \”" & acctName & “\”") application name “Entourage AppleScripts”
delay 10
end if
end tell

Continue reading »]]> The past few days people in Linux blogosphere have been bringing back up the noatime/nodiratime mount options. These options disable the updating of file and directory access times. On many standard systems when you read file a “last read,” or access time, timestamp is written to disk. Disabling the writing of access times can provide performance increases in some conditions. Probably in a lot of conditions. Disabling the writing of these access times can be accomplished with the noatime and nodiratime mount options on a typical FS on a Linux system. Well in OS X and hfs+ nodiratime doesn’t exist but noatime does.

These options are old news to some. I had used them in Linux in the past – heck I think it was even in the standard Gentoo install docs – but I had never them a second thought since I moved to OS X. If you know me personally you know I can’t leave something untweaked. And those recent discussions got me to thinking…

Be forewarned, I haven’t gone to great lengths to explain the concepts of the notes below so if you’ve never seen a terminal this isn’t going to be comprehendible.

I wanted to mount my filesystems with the noatime option in OS X to disable the updates to access times for files. Problem is that, at least in 10.5, OS X no longer honors /etc/fstab for system disks, only for automount disks.

After wrestling with it for awhile I gave upon trying to find a location where I could specify mount options for system disks. I decided to just remount the disk later with the correct options. I created a StartupItem entry to remount the disk. I created a directory:

# mkdir /Library/StartupItems/spencer_boot

Then I created the StartupItem plist. Pretty straight forward.

# cat /Library/StartupItems/\
spencer_boot/StartupParameters.plist

{
Description = “Spencer’s Boot Script”;
Provides = (“spencer_boot”);
OrderPreference = “None”;
Messages =
{
start = “Starting Spencer’s Boot Script”;
stop = “Stoping Spencer’s Boot Script”;
restart = “Restarting Spencer’s Boot Script”;
};
}

Now I needed the shell script that would be run on boot.

# cat /Library/StartupItems/spencer_boot/spencer_boot

#!/bin/sh

. /etc/rc.common

case “$1″ in
start)

ConsoleMessage “Starting Spencer Boot: remounting root fs noatime”
mount_hfs -o noatime /dev/disk0s2 /

;;
esac

exit 0

This solved the problem for the root fs but I also use Filevault. If you don’t use Filevault you can stop reading here. How would I go about this? Same problem as before, no where to add mount time options. Additionally the fs is mounted upon login, not boot. So our previous method of creating a StartupItem won’t work. We’re going to have to do it later after it has been mounted – again.

<redacted> I did have some other information here but after review I wasn’t happy with advocating the “hack” I’m using. But the gist of it is to run something like this: /sbin/mount -u -o noatime,nosuid,nodev /dev/disk1s2 /Users/spencer/ after the volume is mounted. This happens after you enter your password. So a good place would be login items if you can figure out how to run mount as root from a user’s startup scripts.</redacted>

After you login and the system has completely finished running your startup apps open a terminal and type “mount”. You should see “noatime” listed as a mount option for you system and Filevault disks.

spencer_boot shell script
StartupParameters.plist for the spencer_boot StartupItem
remount_filevault for noatime in Filevault volumes

Continue reading »]]> Ran into a problem with Exchange. I created a server-side rule to place spam messages in a folder that didn’t exist. All spam was instead going to the root folder, the folder above my inbox. Well if you use Entourage to access Exchange you will not be able to access this folder. If you go into Outlook Web Access (OWA) you can navigate to the root user folder by clicking on “Folders”.

Unfortunately by this point I had like thousands and thousands of messages. There is no “Delete All” option in OWA. Craptacular. So moving on I mounted the server via WebDAV in finder (cmd+k). The URL to mount will look something like:
http://exchange.servername.com/exchange/username

If this folder is large navigating to it in Finder will be a horrific experience. Open Terminal.app and navigate to the mountpoint.

~/> cd /Volumes/username

Once again, if the folder is large rm *.EML will not work as the wildcard expansion done by bash will exceed the length of the command-line itself (32K by default IIRC). Try this:


/Volumes/username> SRC=./*.EML
/Volumes/username> for i in $SRC; do rm "$i"; done


This will cleanup most, if not all, of the mess. Some files will not be removed due to escape characters and escaped escaped characters etc. Open the folder in Finder and delete the rest. There are def. more elegant ways to handle this from a scripting standpoint but this was quick and worked.

Continue reading »]]> Josh’s envy has spun out of control. First he puts OS X 10.4 on his Dell:

I really don’t know why people think it is soooo hard to get OS X onto a Dell.

Josh has been running 10.4 like this for about 6 months.

Now he upgrades to Leopard:

At this point I just had to play with the hackintosh. In all honesty I think his Leopard install might be more stable. His install only crashes when he drops his laptop and it is too much for the adhesive to handle. My Leopard only crashes when I have 10 important things going on… note to self – scotch tape can prevent kernel panics.

Disclaimer: No Dell’s were harmed in the creation of this blog entry… so far. We still haven’t removed that last sticker, ahem, “we have yet to downgrade to from 10.4 to Windows”.

Continue reading »]]> Jarno over at F-Secure commented on the recent “trojan” for the iPhone :

Hopefully this serves as a warning for those who have opened their iPhones using a security hole in the system and then installing unverified software without a second thought to what they are doing.

Warning noted. The lesson here is not that we, the hacked iPhone community, should not take advantage of the holes; the lesson is use some common fucking sense. Especially if you’re using a hacked phone with wireless stuff coming out of the wazoo.

Those of you reading this via RSS can fuck off… just about… now.

<!–more–>

Sorry, I’ve been meaning to do that for awhile.

Take note of three four things [1]:

• 1. It is portable
• B. It is highly networked
• 3. You can install all sorts of things at the touch of a finger
• 4. It might run some derivation of the almighty Unix, we’re not really sure. And the terminal emulation app is no help.

When you combine these things plus a pinch or two of stupidity and you have yourself the makings of a good time. iPhone users and smartphone users in general need to understand the power of the devices in their pockets.

The more power a system has the more likely someone is going to hack it. CPU cycles, bandwidth, data, and prestige are fragments of this power. A random server in China ready to be rootkit’d to serve copyrighted material on IRC, the credit card companies database server, and the really popular and trendy pocket-sized computer – they all have this aura, this power. An 11 y/o [q] is drawn to this power like a moth to light. You can’t really stop the kid, just like you can’t stop the moth. But you can turn off the light.

But think about power in relation to other devices. A bluetooth headset: portable, networked, but you can’t really do a whole lot with one. If you find a flaw in my Jawbone’s Bluetooth implementation and manage to exploit the flaw BFD. I don’t care if you can hack my headset. No power here. But the iPhone, I do care if you hack my iPhone. It plays a big role in communication.

When it comes down to it the iPhone is really just a server from your operations center shrunk down a bit. You’re walking around with a full BSD variant here, be aware of that fact. You wouldn’t install random, untrusted applications on your server in the op center, don’t do it on the server in your pocket without carefully exploring the source (code or person). Common sense. Plain and simple.

Verifying the source is only one way to protect yourself. You might still get hacked but at least you didn’t do the dirty work for the kiddie.

Now back to Jarno. Personally I would rather mod my iPhone rather than leave it stock. One of the open doors used by the mod community was a TIFF exploit. A TIFF exploit that allowed any arbitrary website to execute arbitrary code on my phone. The mod used the exploit to gain entry to the system and then closed the door behind itself. Had I not used the trusted exploit to mod my iPhone some random guy in Russia could be using it to server porn. All without me installing some random kids malicious package. Just to be clear: I’m pretty sure my iPhone is “more secure” now than it was when I started. Perhaps that warning is mis-placed. If you aren’t a retard your iPhone will be may be more secure after you have hacked it using the existing mods.

Yes I have to be careful. Yes others should be careful. Understand that someone will be attempting to hack the device in your pocket as long as that aura of power exists. Read reviews of the application, explore the source code, verify the source (website/person). Change the password when you install SSH. Turn off unused services like AFSd and SSH. You know, just look up any UNIX best security practices guide and read through it, most of it will apply here. Then pick up any book about embedded security, all of that will apply. Now go back to the library and pickup a book on wireless security. Or instead of reading, which I hate, you could just stop being a dumbass.

I couldn’t find a reasonable place to drop this one so here: “is that an iPhone in your pocket or did I just Trojan your Troy?” [2]

[1] The iPhone is actually all-knowing as well but I didn’t want to debate the omnipotence of the device. Debating over its powers only serves to anger the iPhone.

[2] This is not funny.

[q] I’m not trying to pick on eleven year-olds here. Twelve y/o works just as well. Eleven just seems like a good age for people to get interested in computer security and they also seem to discover capitalization and leet speak.

Continue reading »]]> I’ve been reading about webclips but was having a problem finding a real use for them. Webclips, you know, just right click in Safari and “Open in Dashboard”? I thought RSS met my needs. I just added some dynamic content to my sidebar, which may or may not still be there when you are reading this.

It’s actually not the fact that the content is dynamic that converted me to a Webclips fan. The content to the right is actually “powered by” XML and/or RSS so I could just as easily have reached the same information in other ways. There are tons of Dashboard widgets that do a great job with those tasks.

The thing that really intrigued me was that I could use the Webclip to monitor the new content. Since I’m building the content from another site I just want to keep an eye on it for awhile to ensure it behaves as expected, like preventing Enya from appearing in the Album list.

I fully expect to find other uses now that I’ve been exposed (no, not like that). Take a look at the pics below.

(it’s 1am and I don’t feel like doing proper foot noting so screw you for judging me)

Continue reading »]]> You know what we be cool for Leopard developers and perhaps others? If Time Machine could start to handle backup snapshot trees. You know – like VMWare Workstation for Windows/Linux’s snapshot manager that supports branching. VMWare even supports the deletion of images in the middle to save space and perhaps enhance performance. It merges disks together when necessary.

Developers could create a branch before installing a particular software component or library and I think kernel (extension)? developers would find this invaluable. You could also think of it as an RCS for filesystems. Perhaps administrators would find it useful in their testing labs as they prepare for deployment of a new server or system. Yes I know these versioning versioning file systems already exist and one even appeared in Plan 9 back in 2002, but I just thought Time Machine could be used as a nice as a starting point for an alternative.

UPDATED 2007-11-4: I can’t believe I forgot to mention ZFS. Apple originally announced Leopard would be sporting the highly regarded ZFS and peoples mouths started drooling. Unfortunately that feature got dropped. Apple is not the only one dropping support for some interesting file system technology. Microsoft chose to drop WinFS after originally state it would ship with Vista.

UPDATED 2007-11-6: Chris has informed me that ZFS will be available for Leopard with read-only support in the relatively near future. Pending the outcome of that “beta” release, read/write support will be released as well.

UPDATED 2007-11-6 part 2: Chris dropped by to tell me that ZFS read-only support is now available. He did so with the ever so subtle “Hey, man zfs”. Thanks for making me look like a dumbass, I was doing fine on my own. Quote from 10.5′s zfs man page:

ZFS Read-only Implementation

ZFS  on OSX is implemented as a readonly filesystem by default.  This means that only the ZFS subcommands that do non write operations are permitted. Permitted subcommands are list, get, mount, unmount, and send.

A full ZFS  implementation  that  allows  all  subcommands  and  is  read/write  is  available  for  download  at http://developer.apple.com/.

To determine which version of ZFS is loaded(readonly or writable):

         # kextstat | grep zfs

com.apple.filesystems.zfs.readonly  is the readonly kext version.  com.apple.filesystems.zfs is the writable kext version.

Continue reading »]]> I’ve been having tons of wireless network issues lately. At work, which is not surprising being I work at tech company – only God knows who is running what service on their laptop or who is running the microwave in the kitchen across the hall. More worrisome, I’ve been having issues at home too.

So I get home last night and settle down write some documentation in DocBook format. I’ve been writing a custom XSLT in a valiant attempt to unify the documentation process at work. xsltproc is called to perform the transformation on the XML data and create HTML and PDFs as output. Fairly straight forward, right?

Wrong…

I start streaming from iTunes to my Airport Express. Currently, I’m using an Airport Extreme running 802.11N at 5GHz only and an Airport Express running 802.11G for my iPhone and visitors without 802.11N compatible laptops. The Express is wired to a LAN port on the Extreme and is connected via a TIP fiber cable to my stereo.

All of the sudden VPN and VNC sessions start dropping like hell. wtf mate? Long story short my xsltproc process went from 30 seconds to 5 minutes because of remote URLs being referenced as DTDs. I know, I know. My night was pretty damn exciting.

Of course I jump to conclusions and start blaming Leopard. Well after punching the wall a few times I sat down. It turns out it only happens when I have my Airport Extreme in 802.11n 5GHz mode. As a rudimentary example, my download speeds form kernel.org went from 30KB to about 700 KB when I went to 802.11n 2.4GHz only. Not sure what is wrong but I blame Apple Just kidding. If you look at this image you will see a dip in the graph in the center when the Extreme reboots to go from 2.4 GHz to 5 GHz. When it comes back online notice the distinct dip that is in the signal, communication quality, and signal to noise ratio. Not sure if the issue is hardware or interference related but given a similar amount of noise is seen at 2.4 GHz I’m guessing it is hardware related.