An open community 
of Macintosh users,
for Macintosh users.

FineTunedMac Dashboard widget now available! Download Here

Previous Thread
Next Thread
Print Thread
Apple takes security seriously.
#14384 02/26/11 10:27 AM
Joined: Aug 2009
Likes: 7
jchuzi Online OP
OP Online

Joined: Aug 2009
Likes: 7


Jon

macOS 11.7.10, iMac Retina 5K 27-inch, late 2014, 3.5 GHz Intel Core i5, 1 TB fusion drive, 16 GB RAM, Epson SureColor P600, Photoshop CC, Lightroom CC, MS Office 365
Re: Apple takes security seriously.
jchuzi #14392 02/26/11 04:43 PM
Joined: Aug 2009
Likes: 14
Offline

Joined: Aug 2009
Likes: 14
In the article "Miller predicted Lion would incorporate full ASLR (Address Space Layout Randomization), a security technique that puts important data in unpredictable locations, making it harder to target known weaknesses."

That's a really interesting idea. I wonder if it means a "rolling" type of storage, periodically moving the data to different locations, sort of like a garage door opener that constantly changes the code?

ryck


ryck

"What Were Once Vices Are Now Habits" The Doobie Brothers

iMac (Retina 5K, 27", 2020), 3.8 GHz 8 Core Intel Core i7, 8GB RAM, 2667 MHz DDR4
OS Ventura 13.6.3
Canon Pixma TR 8520 Printer
Epson Perfection V500 Photo Scanner c/w VueScan software
TM on 1TB LaCie USB-C
Re: Apple takes security seriously.
ryck #14399 02/27/11 12:57 AM
Joined: Aug 2009
Likes: 16
Moderator
Online
Moderator

Joined: Aug 2009
Likes: 16
You might take a look at this Wikipedia article on ASLR.According to the article OS X introduced at least a partial implementation of ASLR in OS X 10.5.


If we knew what it was we were doing, it wouldn't be called research, would it?

— Albert Einstein
Re: Apple takes security seriously.
ryck #14485 03/01/11 10:50 PM
Joined: Aug 2009
Offline

Joined: Aug 2009
Originally Posted By: ryck
That's a really interesting idea. I wonder if it means a "rolling" type of storage, periodically moving the data to different locations, sort of like a garage door opener that constantly changes the code?


Even if it's just at a different place every reboot, that'd be sufficient.


I work for the Department of Redundancy Department
Re: Apple takes security seriously.
Virtual1 #14489 03/02/11 12:26 AM
Joined: Aug 2009
Likes: 7
jchuzi Online OP
OP Online

Joined: Aug 2009
Likes: 7


Jon

macOS 11.7.10, iMac Retina 5K 27-inch, late 2014, 3.5 GHz Intel Core i5, 1 TB fusion drive, 16 GB RAM, Epson SureColor P600, Photoshop CC, Lightroom CC, MS Office 365
Re: Apple takes security seriously.
jchuzi #14502 03/02/11 04:28 PM
Joined: Aug 2009
Likes: 16
Moderator
Online
Moderator

Joined: Aug 2009
Likes: 16
I shudder to think, how many panic stricken requests for information on breaking the disk encryption key or password this is going to generate. Not to mention the screams of anguish when they are told there is no recovery from the lost password other than erase and install.


If we knew what it was we were doing, it wouldn't be called research, would it?

— Albert Einstein
Re: Apple takes security seriously.
joemikeb #14504 03/02/11 06:20 PM
Joined: Aug 2009
Likes: 15
Online

Joined: Aug 2009
Likes: 15
Originally Posted By: joemikeb
I shudder to think, how many panic stricken requests for information on breaking the disk encryption key or password this is going to generate. Not to mention the screams of anguish when they are told there is no recovery from the lost password other than erase and install.

Will it really be much worse than it is now?

Losing your entire volume is not all that much worse than losing your home folder, is it?


The new Great Equalizer is the SEND button.

In Memory of Harv: Those who can make you believe absurdities can make you commit atrocities. ~Voltaire
Re: Apple takes security seriously.
artie505 #14505 03/02/11 06:25 PM
Joined: Aug 2009
Likes: 4
Offline

Joined: Aug 2009
Likes: 4
And still the 'cognoscenti' insist that Mac OS X is better than OS 9?! For shame!
I ain't got none of those problems. And I like it. smile + wink
Aah, the cave is so deep and dark and warm ....

Re: Apple takes security seriously.
grelber #14506 03/02/11 06:27 PM
Joined: Aug 2009
Likes: 7
jchuzi Online OP
OP Online

Joined: Aug 2009
Likes: 7
I have OS X and don't have the problems either. Those problems occur only if you use FileVault. If you don't use it, the issue is moot.


Jon

macOS 11.7.10, iMac Retina 5K 27-inch, late 2014, 3.5 GHz Intel Core i5, 1 TB fusion drive, 16 GB RAM, Epson SureColor P600, Photoshop CC, Lightroom CC, MS Office 365
Re: Apple takes security seriously.
jchuzi #14507 03/02/11 06:33 PM
Joined: Aug 2009
Likes: 4
Offline

Joined: Aug 2009
Likes: 4
Some day we're going to have to duke it out on the Hudson or, preferably, on Lake George, my preferred stamping grounds.
wink
And afterwards a nice single malt at the Airport Inn (if indeed it still exists).

Re: Apple takes security seriously.
grelber #14508 03/02/11 07:20 PM
Joined: Aug 2009
Likes: 15
Online

Joined: Aug 2009
Likes: 15
I don't use FileVault either, so no problems here, either.

Lake George sounds great, but only during "flats" season. smile


The new Great Equalizer is the SEND button.

In Memory of Harv: Those who can make you believe absurdities can make you commit atrocities. ~Voltaire
Re: Apple takes security seriously.
artie505 #14512 03/03/11 01:03 AM
Joined: Aug 2009
Likes: 1
Offline

Joined: Aug 2009
Likes: 1
Originally Posted By: artie505
Will it really be much worse than it is now?

Losing your entire volume is not all that much worse than losing your home folder, is it?


Depends on how you use your computer, I reckon. I actually keep very little in my home folder; I store most of my data on the top level of the hard drive.

One big difference I can see for folks who use their home folders as they ought is applications. If you lose access to your home folder, you lose your data; if you lose access to the entire disk, you lose your data and your apps. (Well, assuming you don't have backups. But everyone keeps good backups, right? Right?)

I generally don't recommend FileVault for most folks. It's really only useful for people who have data with significant economic, legal, industrial, or military value, or folks with legally regulated data like health records. (I also don't keep my banking password in my Keychain, so take that for what it's worth.) The only time I've ever used FileVault is when I went on vacation overseas, because I didn't want customs pawing through my iPhoto library when I came back, which they sometimes do.


Photo gallery, all about me, and more: www.xeromag.com/franklin.html
Re: Apple takes security seriously.
tacit #14524 03/03/11 09:33 PM
Joined: Aug 2009
Offline

Joined: Aug 2009
Originally Posted By: tacit
Depends on how you use your computer, I reckon. I actually keep very little in my home folder; I store most of my data on the top level of the hard drive.


I wouldn't have guessed that of Tacit! Bad Tacit! That went out with OS 9!


I work for the Department of Redundancy Department
Re: Apple takes security seriously.
Virtual1 #14528 03/04/11 01:46 AM
Joined: Aug 2009
Likes: 1
Offline

Joined: Aug 2009
Likes: 1
Heh. Old habits die hard.

To me, I don't see a lot of compelling reason to use my home folder as opposed to any place else. I'm the only person who uses this computer, and I ted to stick stuff wherever it's convenient, which is usually the top level of the internal hard drive. (I have several external USB hard drives for this machine as well.)

My iPhoto library is in my home folder, because that's where iPhoto stashes it by default, so using FileVault on my home folder was sufficient for going through customs. But everything else? *shrug*


Photo gallery, all about me, and more: www.xeromag.com/franklin.html
Re: Apple takes security seriously.
tacit #14530 03/04/11 06:39 AM
Joined: Aug 2009
Likes: 15
Online

Joined: Aug 2009
Likes: 15
> Depends on how you use your computer, I reckon. I actually keep very little in my home folder; I store most of my data on the top level of the hard drive.

Of course... When I posed the question I was thinking of my own setup, in which everything important (except my iPhoto stash), including my 3rd party apps, is on a separate partition.


The new Great Equalizer is the SEND button.

In Memory of Harv: Those who can make you believe absurdities can make you commit atrocities. ~Voltaire

Moderated by  alternaut, cyn 

Link Copied to Clipboard
Powered by UBB.threads™ PHP Forum Software 7.7.4
(Release build 20200307)
Responsive Width:

PHP: 7.4.33 Page Time: 0.032s Queries: 44 (0.024s) Memory: 0.6433 MB (Peak: 0.7563 MB) Data Comp: Zlib Server Time: 2024-03-28 15:51:05 UTC
Valid HTML 5 and Valid CSS