melomac

After an invitation to investigate the problem further, I decided to withdraw the post and summarize the updates here: https://melomac.com/posts/xprotect-behavioral-flop/#golden-g...

macOS Golden Gate quietly un-fixes the XPdb flock bug: an inverted file-read-data rule in the platform sandbox profile reopens XProtect behavioral events database to reads, resurrecting the denial-of-service against XProtectBridgeService.

I am using it to backup my public and private repositories to Github and it's effortless, indeed. I am using ssh protocol and a read/write deployment key. Also, I anticipated `git push --force` could be an issue, it's not.

How to run latest Swift 6.3 on stable Debian 13 Trixie by working around LLDB’s Python dependency mismatch.

`fashion` is a Swift command-line interface to traverse a file hierarchy and compute or match popular hash digests. The project is hosted on [GitHub](https://github.com/melomac/fashion "GitHub: melomac/fashion") and natively supports CryptoKit, ssdeep, TLSH, Git blob hash, SymHash, XAR TOC, CDHash, etc..

FileZilla author was caught red handed, shipping app with IronCore adware downloader, aka installCore from ironSource:

https://www.sentinelone.com/blog/osx-ironcore-a-or-what-we-k...

As IronCore evolved, it eventually got packed — `+[obj load]` executed prior to entry point — and provided a JavaScript to Objective-C bridge. JS payloads were remotely downloaded and AES encrypted...

While offers were the usual suspects back then (Advanced Mac Cleaner, MacKeeper, and a customized Chromium app), the technique could be abused in a couple of ways so to spy on specific targets.

Anyhow, I don't know what you do with FZ, I am very much into rsync (OSS) and Transmit app (Panic).

Qba'g lbh jbeel, ebg13 jvyy cebgrpg lbh!

A bit sad it's always the same defaults than everywhere else.

When I setup a new system, I always end up here: https://github.com/mathiasbynens/dotfiles/blob/master/.macos

Then I add the few missing ones as I use the machine, like this one for example: https://macos-defaults.com/finder/showwindowtitlebaricons.ht...

This looks very much like the accessibility feature “Control Watch with iPhone” when AssistiveTouch color is set to Grey in the Watch accessibility settings…

https://support.apple.com/en-my/guide/watch/apd890848603/wat...

It is even more frustrating that the image are in the document, and Microsoft Word for Mac would still display them accurately.

And LibreOffice would display the images in the RTF document in a different size (a tiny block).

If my old Mac display would work, I could have been able to send the document over to CUPS via Netatalk, and make a PDF out of it. Unfortunately Mini vMac can't connect to that VM on the LAN...

Anyhow, it is scandalous that opening legacy documents became such a PITA.

I was able to download and transfer the proposal document to a Mini vMac emulator, set the Finder's type and creator to those of a Microsoft Word 5 document i.e. respectively WDBN and MSWD, and finally open the document with Microsoft Word 5 for Mac to export it as a RTF document.

Here you have it: https://neko.melomac.net/tmp/proposal.rtf

I certainly agree opening a document from this Macintosh era should be, by far, easier than the process I detailed below, but this is how it is ¯\_(ツ)_/¯

Lovely, made a fish shell function out of it:

    # https://www.petefreitag.com/blog/dns-over-https/

    function dnsq --description "Query DNS name(s) over HTTPs using JSON"

        argparse --ignore-unknown 'h/help' 'd/dns=' 'n/name=+' 't/type=+' -- $argv

        if set -q _flag_help
            echo "Usage: $_ example.com"
            echo '  -n --name    DNS query name(s)'
            echo '  -t --type    DNS query type(s), ex: A (default), MX, TXT...'
            echo '  -d --dns     DNS query endpoint: cloudflare (default), google'
            echo '  -h --help    Print this help message and exit'
            return 0
        end

        if not set -q _flag_name && test (count $argv) -eq 0
            echo 'Missing name parameter.'
            return 1
        end

        if not set -q _flag_type
            set _flag_type 'A'
        end

        switch $_flag_dns
            case 'google'
                set url 'https://dns.google/resolve'
            case 'cloudflare' '*'
                set url 'https://cloudflare-dns.com/dns-query'
        end

        for type in $_flag_type
            for name in $_flag_name $argv
                set query (string join '&' (string join '=' 'name' $name) (string join '=' 'type' $type))

                if isatty stdout && type -q jq
                    curl --header 'Accept: application/dns-json' --silent (string join '?' $url $query) | jq -r
                else
                    curl --header 'Accept: application/dns-json' --silent (string join '?' $url $query)
                end
            end
        end

    end

Fastmail is great at reacting and transparently informing users. This is something I'd love to see "normalized" so users could efficiently assess service providers reliability.

I was surprised there is no plugin to limit the size of a comment, so I ended up editing `wp-comments-post.php` line 129 from:

if ( '' == $comment_content ) {

to:

if ( '' == $comment_content || 32768 < strlen($comment_content) ) {

Might be a good time to backup your drive before logs are rotated... At the time of your writting, you only have kernel.log as a boot time clue, and it will self erase.