angulardragon03

Yeah iirc they have moved some stuff around that sshd relied on into the pre-boot volume, so it works exactly as you describe.

Hugo is a static site generator, so I can host my site anywhere that can serve an index.html.

With Wordpress, you have to worry about PHP, a database, etc. It’s the difference between being able to use GitHub pages, and needing either a VPS or shared hosting

… how do you think the cruise control decelerates you? Is this a troll post?

Macs are fine for mass admin. Companies like Meta, SAP, and IBM have fleets numbering in the 6 figures that they manage with no issue.

I manage almost a thousand Macs at a financial institution with ease.

If you’re using Intune for Mac management, I would understand your perspective a bit more.

You’ll still get two more years of Sequoia updates.

Persistence in modern macOS is only really possible in userspace, as the OS partition is immutable. There are only a handful of places this is possible, which are fairly easy to detect.

Unless border agents are burning 0-days on random passersby, it’s fairly unlikely they installed anything persistent that can’t be removed.

This is more to do with ABM - you can add a device to ABM that wasn’t put there by a reseller/vendor/Apple. This also enrols the device, and removing the enrolment in the first 30 days also removes it from ABM again.

After the 30-day period, the enrolment profile cannot be removed on the device-side. This workflow applies for both iOS and macOS.

On macOS the enrolment is supervised either way. You can also get a supervised enrolment on an iOS device that isn’t in any ABM instance - there is more than one path to supervision.

Lower power consumption, actual 10-foot interface rather than squinting at the TV, lower maintenance, and (depending on your OS of choice) less intrusive OS-level advertising.

I did a GCP training a while back, and the anecdote from one of the trainers was that the Cloud Storage team (GCP’s S3-compatible product) hadn’t lost a single byte of data since GCS had existed as a product. Crazy at that scale.

This is the Tesla Autopilot playbook, which seems to continue to work decently for that particular CEO

This is correct - the mechanism seems like it’s primarily for shaming developers that don’t use the new API

IIRC you can’t run updates while the laptop is asleep though, as that typically requires a user password to initiate. Even with MDM you can’t force updates during sleep

Basically, yeah. Another “free speech absolutism” media company that doesn’t want to acknowledge that some speech (e.g. Holocaust denial) is actually illegal in many countries in mainland Europe, because it’s their bread and butter to host said speech.

Rumble isn’t a huge platform and I doubt this is much more than a publicity stunt.

Target Disk Mode has a replacement on Apple Silicon, if you haven’t tried that out yet.

https://support.apple.com/en-sg/guide/mac-help/mchlb37e8ca7/...

It’s sort of enforceable - Apple’s own virtualisation framework that lots of VM providers use (on Apple Silicon) actually enforces a hard cap of two guests, and won’t allow you to spawn more.

With other hosts, it’s kind of an Adobe approach - you either weren’t gonna buy a Mac anyways, or you might be tempted to buy a Mac after using macOS in a VM. Realistically, it’s not worth Apple coming after you unless you’re an enterprise making your money by breaking the EULA.

You’re missing something. The Crowdstrike issue was caused by a channel update (basically a definitions update) that they pushed that broke their own sensor. Microsoft wasn’t involved in the delivery of that update.

Being verified made you trustworthy in the sense that it signified that Twitter trusted the account. If you trusted Twitter, then you could sort of infer a kind of trust relationship with that account, in that it was trusted by an authority you trust.

Getting verified was just a popularity/insider contacts game, for sure. But now that trust relationship is sort of up for grabs, and there are a litany of people who (at a glance) will trust accounts with that mark if they see posts from them. This is ripe for exploitation by bad actors.

The kind of free to play with dark patterns that the FTC fines you for: https://www.ftc.gov/news-events/news/press-releases/2023/03/...

Most interesting is this section:

> Fortnite’s counterintuitive, inconsistent, and confusing button configuration led players to incur unwanted charges based on the press of a single button.

Apple is also taking aim at Epic here for using buttons and labels identical to the ones that they use - I’m curious to actually see these buttons, and I wonder if they are being used intentionally.

Tesla stock is down not just YoY, but also basically since the Twitter acquisition. This guys attention is clearly elsewhere, but he expects investors to vote to grant him the biggest bonus ever, and for what? Yeah, he met the targets, but he demonstrably is not acting in the best interests of the company.

I use a Mac every day, for work and personal stuff.

I have a Windows desktop PC, that I use almost exclusively for playing PC games with friends. I already had to use some obscure method to bypass signing in with my Microsoft account during installation. I boot it anywhere between once a month and a few times a week, and about 50% of the time some random configuration changes and I can’t do the one thing that I set out to do (play a game) without updating or downgrading some arbitrary driver.

Oh, and it nags me almost every boot to sign in with my Microsoft account for one reason or another. And this is an operating system with an MSRP of $200!

There are loads of things to critique about my Mac, but I can use it daily just fine, without the OS trying to trick me into signing into some service or other. The daily experience of using it feels much more consensual, as you describe.

No, the implication is that Terraform will become prohibitively expensive to use. AAP has been around for a while, as Red Hat’s downstream of (iirc) AWX. It’s also quite pricey, like Terraform may become.

I’m super confused - Microsoft has tried this both in 2012 and 2016 (with Surface RT, and then again with Windows 10 on ARM). Neither of these turned out to be great for Linux adoption in this space (to my knowledge) - what leads you to believe that this time will be different?

You could try https://mollie.com

(Disclaimer - I work there)

There is some sample C code to test with, and the issue is actually in the pre-releases. It’s just not in the first couple.

No approvals and no CI with clickops is indeed not a core tenet, but these are things you can implement on top of a solution like Jamf.

However, the market wasn’t always asking for it. Most Mac management is done by a sole individual at the org, usually not a large team where everyone can review everyone’s changes. This is steadily changing, but there are still tons of people who do clickops in Jamf because it’s what they understand and have the bandwidth to do.

yes, this is a core tenet of "Device Management".

You can restrict this ability using the built-in (granular) access controls.

Agreed. It doesn’t seem like there is anything you’d want to do in a binary that couldn’t be done by creating an installer .pkg and just including all the logic in the post install script.

The user gets a double-click “installer”, and like you said, you don’t even need to sign it.

Afaik no interop - they use different protocols.

It feels to me that, if you were going to make the complaint that DHH has, you would also explicitly mention that you had given them test account credentials. The actual reasonable complaint would be to say "we gave them test account credentials and they _still_ said our app was non-functional". But, that isn't the messaging here, it's not even mentioned. Given that DHH has very public opinions about Apple, I find it hard to believe he would miss the opportunity to make such a slam dunk, unless it wasn't true to make that claim.