MagerValp

Blogish stuff

AutoDMG29 Oct 2013: Since InstaDMG has issues with 10.9 and SIC is no more I took it upon myself to create a replacement, and the result is AutoDMG. It uses the same mechanic as InstaDMG to generate never booted system images, and also applies the latest software updates and installs your own custom packages. The biggest change is that it’s a GUI application now: Today I’m releasing 0.8 which has matured a lot over the previous releases, and... Read on →

Irony is a B*tch13 Sep 2013: So yesterday I posted about a vulnerability is OS X where passwords are leaked during login, and by chance I happened to read my previous post on accessing kerberized services with the Active Directory computer account today. It prominently featured the following nugget: echo "$ADCOMPPWD" | kinit --password-file=STDIN "$ADCOMPACCT" Oh sweet irony. I updated the post with a fixed version that uses a temporary file instead of piping from echo for the whole world to... Read on →

OS X Passwords Leaked During Login12 Sep 2013: NOTE: This post was written May 17th but was withheld until Apple patched the vulnerability. Overview When logging in on a machine running OS X 10.7 - 10.8.4 with a configuration profile applied passwords are exposed in clear text to other logged in users. Apple has released 10.8.5 (combo) and Security Update 2013-004 for 10.7 with patches for the vulnerability. CVE-ID CVE-2013-1030 (Apple’s summary) Background I was writing a script today to automatically mount shared... Read on →

Accessing Kerberized Services with the Active Directory Computer Account22 May 2013: The usual scenario when you’re in a kerberized environment is that your users get a Kerberos ticket on login and they use this to access protected services, such as their home directory. Sometimes you need to execute a task in the background, and not necessarily on behalf of a user or even with anyone logged in, but how do you guarantee that the connecting client is who it says it is? In these situations you... Read on →

CreateUserPkg v1.2.305 Apr 2013: CreateUserPkg v1.2.3 is now available in the App Store and on the project homepage. Read on →