An open community 
of Macintosh users,
for Macintosh users.

FineTunedMac Dashboard widget now available! Download Here

Topic Options
#14384 - 02/26/11 02:27 AM Apple takes security seriously.
jchuzi Online


Registered: 08/04/09
Loc: New York State
_________________________
Jon

OS 10.14.5, iMac Retina 5K 27-inch, late 2014, 3.5 GHz Intel Core i5, 1 TB fusion drive, 16 GB RAM, Epson SureColor P600, Photoshop CC, Lightroom CC, MS Office 365

Top
#14392 - 02/26/11 08:43 AM Re: Apple takes security seriously. [Re: jchuzi]
ryck Offline


Registered: 08/04/09
Loc: Okanagan Valley
In the article "Miller predicted Lion would incorporate full ASLR (Address Space Layout Randomization), a security technique that puts important data in unpredictable locations, making it harder to target known weaknesses."

That's a really interesting idea. I wonder if it means a "rolling" type of storage, periodically moving the data to different locations, sort of like a garage door opener that constantly changes the code?

ryck
_________________________
ryck

iMac (Retina 5K, 27", 2017), 3.4 GHz Intel Core i5, 8GB RAM, 2400 MHz DDR4
OS High Sierra 10.13.6
Canon MX710 Printer
Epson Perfection V500 Photo Scanner
Time Machine on 320GB OWC Mercury OTG Pro
Carbon Copy Clone on 500GB OWC Mercury OTG Pro

Top
#14399 - 02/26/11 04:57 PM Re: Apple takes security seriously. [Re: ryck]
joemikeb Online
Moderator

Registered: 08/04/09
Loc: Fort Worth, Texas
You might take a look at this Wikipedia article on ASLR.According to the article OS X introduced at least a partial implementation of ASLR in OS X 10.5.
_________________________
joemikeb • moderator

Top
#14485 - 03/01/11 02:50 PM Re: Apple takes security seriously. [Re: ryck]
Virtual1 Offline


Registered: 08/04/09
Loc: Iowa
Originally Posted By: ryck
That's a really interesting idea. I wonder if it means a "rolling" type of storage, periodically moving the data to different locations, sort of like a garage door opener that constantly changes the code?


Even if it's just at a different place every reboot, that'd be sufficient.
_________________________
I work for the Department of Redundancy Department

Top
#14489 - 03/01/11 04:26 PM Re: Apple takes security seriously. [Re: Virtual1]
jchuzi Online


Registered: 08/04/09
Loc: New York State
_________________________
Jon

OS 10.14.5, iMac Retina 5K 27-inch, late 2014, 3.5 GHz Intel Core i5, 1 TB fusion drive, 16 GB RAM, Epson SureColor P600, Photoshop CC, Lightroom CC, MS Office 365

Top
#14502 - 03/02/11 08:28 AM Re: Apple takes security seriously. [Re: jchuzi]
joemikeb Online
Moderator

Registered: 08/04/09
Loc: Fort Worth, Texas
I shudder to think, how many panic stricken requests for information on breaking the disk encryption key or password this is going to generate. Not to mention the screams of anguish when they are told there is no recovery from the lost password other than erase and install.
_________________________
joemikeb • moderator

Top
#14504 - 03/02/11 10:20 AM Re: Apple takes security seriously. [Re: joemikeb]
artie505 Online


Registered: 08/04/09
Originally Posted By: joemikeb
I shudder to think, how many panic stricken requests for information on breaking the disk encryption key or password this is going to generate. Not to mention the screams of anguish when they are told there is no recovery from the lost password other than erase and install.

Will it really be much worse than it is now?

Losing your entire volume is not all that much worse than losing your home folder, is it?
_________________________
The new Great Equalizer is the SEND button.

In Memory Of Harv: Those who can make you believe absurdities can make you commit atrocities. ~Voltaire

Top
#14505 - 03/02/11 10:25 AM Re: Apple takes security seriously. [Re: artie505]
grelber Offline


Registered: 08/05/09
Loc: North of 49th ||
And still the 'cognoscenti' insist that Mac OS X is better than OS 9?! For shame!
I ain't got none of those problems. And I like it. smile + wink
Aah, the cave is so deep and dark and warm ....

Top
#14506 - 03/02/11 10:27 AM Re: Apple takes security seriously. [Re: grelber]
jchuzi Online


Registered: 08/04/09
Loc: New York State
I have OS X and don't have the problems either. Those problems occur only if you use FileVault. If you don't use it, the issue is moot.
_________________________
Jon

OS 10.14.5, iMac Retina 5K 27-inch, late 2014, 3.5 GHz Intel Core i5, 1 TB fusion drive, 16 GB RAM, Epson SureColor P600, Photoshop CC, Lightroom CC, MS Office 365

Top
#14507 - 03/02/11 10:33 AM Re: Apple takes security seriously. [Re: jchuzi]
grelber Offline


Registered: 08/05/09
Loc: North of 49th ||
Some day we're going to have to duke it out on the Hudson or, preferably, on Lake George, my preferred stamping grounds.
wink
And afterwards a nice single malt at the Airport Inn (if indeed it still exists).

Top
#14508 - 03/02/11 11:20 AM Re: Apple takes security seriously. [Re: grelber]
artie505 Online


Registered: 08/04/09
I don't use FileVault either, so no problems here, either.

Lake George sounds great, but only during "flats" season. smile
_________________________
The new Great Equalizer is the SEND button.

In Memory Of Harv: Those who can make you believe absurdities can make you commit atrocities. ~Voltaire

Top
#14512 - 03/02/11 05:03 PM Re: Apple takes security seriously. [Re: artie505]
tacit Offline


Registered: 08/03/09
Loc: Portland, Oregon, USA
Originally Posted By: artie505
Will it really be much worse than it is now?

Losing your entire volume is not all that much worse than losing your home folder, is it?


Depends on how you use your computer, I reckon. I actually keep very little in my home folder; I store most of my data on the top level of the hard drive.

One big difference I can see for folks who use their home folders as they ought is applications. If you lose access to your home folder, you lose your data; if you lose access to the entire disk, you lose your data and your apps. (Well, assuming you don't have backups. But everyone keeps good backups, right? Right?)

I generally don't recommend FileVault for most folks. It's really only useful for people who have data with significant economic, legal, industrial, or military value, or folks with legally regulated data like health records. (I also don't keep my banking password in my Keychain, so take that for what it's worth.) The only time I've ever used FileVault is when I went on vacation overseas, because I didn't want customs pawing through my iPhoto library when I came back, which they sometimes do.
_________________________
Photo gallery, all about me, and more: www.xeromag.com/franklin.html

Top
#14524 - 03/03/11 01:33 PM Re: Apple takes security seriously. [Re: tacit]
Virtual1 Offline


Registered: 08/04/09
Loc: Iowa
Originally Posted By: tacit
Depends on how you use your computer, I reckon. I actually keep very little in my home folder; I store most of my data on the top level of the hard drive.


I wouldn't have guessed that of Tacit! Bad Tacit! That went out with OS 9!
_________________________
I work for the Department of Redundancy Department

Top
#14528 - 03/03/11 05:46 PM Re: Apple takes security seriously. [Re: Virtual1]
tacit Offline


Registered: 08/03/09
Loc: Portland, Oregon, USA
Heh. Old habits die hard.

To me, I don't see a lot of compelling reason to use my home folder as opposed to any place else. I'm the only person who uses this computer, and I ted to stick stuff wherever it's convenient, which is usually the top level of the internal hard drive. (I have several external USB hard drives for this machine as well.)

My iPhoto library is in my home folder, because that's where iPhoto stashes it by default, so using FileVault on my home folder was sufficient for going through customs. But everything else? *shrug*
_________________________
Photo gallery, all about me, and more: www.xeromag.com/franklin.html

Top
#14530 - 03/03/11 10:39 PM Re: Apple takes security seriously. [Re: tacit]
artie505 Online


Registered: 08/04/09
> Depends on how you use your computer, I reckon. I actually keep very little in my home folder; I store most of my data on the top level of the hard drive.

Of course... When I posed the question I was thinking of my own setup, in which everything important (except my iPhoto stash), including my 3rd party apps, is on a separate partition.
_________________________
The new Great Equalizer is the SEND button.

In Memory Of Harv: Those who can make you believe absurdities can make you commit atrocities. ~Voltaire

Top

Moderator:  alternaut, cyn