Hacker News: adib

New comment by adib in "The Framework Desktop is a beast"

adib — Tue, 19 Aug 2025 09:10:09 +0000

My experience is on the contrary. Employer-lent laptop only needs to be _not lost_, especially in MNCs. Replacing an MNC laptop is relatively easy and free for the user - as long as it is not lost, by the way.

New comment by adib in "New Mac Mini with M4"

adib — Tue, 29 Oct 2024 19:00:32 +0000

A missed opportunity though. If it’s USB-C powered, it could be even smaller and Apple could simplify its BOM by including a MacBook Pro charger with it.

New comment by adib in "New Mac Mini with M4"

adib — Tue, 29 Oct 2024 18:31:51 +0000

Docker on Mac works fine on external drive. I moved the storage volume on a rotating USB 3 drive.

New comment by adib in "The state of external retina displays"

adib — Mon, 03 Jan 2022 03:38:32 +0000

Fwiw, Eyoyo offers 4K 15” monitors, which qualify as _retina displays_. Those are usually around $150, depending on reseller and exact model.

New comment by adib in "RFC-0082: Runnning unmodified Linux programs on Fuchsia"

adib — Tue, 31 Aug 2021 08:26:07 +0000

Except that Android apps tend to ask for just about all entitlements available. Translation: effectively back to square 1.

New comment by adib in "RFC-0082: Runnning unmodified Linux programs on Fuchsia"

adib — Tue, 31 Aug 2021 08:23:18 +0000

... caveat to Google's track record of rapid launch and subsequent deprecation of platforms...

New comment by adib in "Apple’s new abuse prevention system: an antritust/competition point of view"

adib — Sat, 07 Aug 2021 04:47:40 +0000

Technically it's "front door" since it _publicly exists_.

New comment by adib in "Apple’s new abuse prevention system: an antritust/competition point of view"

adib — Sat, 07 Aug 2021 04:01:17 +0000

Or Mechanical Turked.

New comment by adib in "Apple’s new abuse prevention system: an antritust/competition point of view"

adib — Sat, 07 Aug 2021 03:59:29 +0000

Say that you're an official with the Chinese Communist Party (CCP). You have huge stacks of brochures of anti-CCP materials. You've got them scanned and hashed. Next you call Apple and say, "Please alert us if similar imageries appears in your customers' devices. My assistants will send you weekly updates of the required hashes." Apple would say, "Sure, we're just following your law..."

Hence when a Chinese photographs such brochure "in the wild" using an iPhone, someone from "the government" will knock the next day and "strongly enquire" about yesterday's photo. Likewise when a Chinese minor receives an iMessage containing such brochure.

This is just _one_ example case of "extension" of the CSAM database as seen fit by some regulatory body.

New comment by adib in "Cloudflare's inaccessible browser contradicts the company's mission"

adib — Sun, 01 Aug 2021 23:44:10 +0000

... Technically for us at least the _gas_ company is different. In fact there are a number of companies providing gas.

New comment by adib in "Bypassing macOS TCC user privacy protections by accident and design"

adib — Mon, 05 Jul 2021 11:50:08 +0000

I haven’t tested the Finder case though. Nevertheless there is the `tell ‘Finder’ ... do shell script ... end tell` construct that _may_ be able to get the Finder to launch an arbitrary subprocess (and may inherit full disk access) just like how Terminal would.

However I’ve tested mounting a local snapshot using the Terminal having full disk access and found out that it is possible to mount a local snapshot and make the mounted copy ignore Unix file permissions.

New comment by adib in "Bypassing macOS TCC user privacy protections by accident and design"

adib — Mon, 05 Jul 2021 06:09:31 +0000

... by manipulating the Finder to:

(1) Create a snapshot of the entire file system; (2) or find a recent Time Machine local snapshot; then (3) mount the snapshot obtained in [1] or [2] without owners enabled, effectively granting Alice read-only access to other people's files without having administrative privileges.

New comment by adib in "Bypassing macOS TCC user privacy protections by accident and design"

adib — Mon, 05 Jul 2021 05:51:19 +0000

... in this case it _does_, albeit in a roundabout way via Time Machine local snapshots. In short, the attacker can bypass Unix file permissions by mounting a local backup with owners disabled.

New comment by adib in "Bypassing macOS TCC user privacy protections by accident and design"

adib — Mon, 05 Jul 2021 01:44:48 +0000

Alice finds a recent Time Machine local snapshot and mount that elsewhere with owners disabled. Then Alice can browse everyone else's (recent) files – without needing sudo access.

Bypassing macOS TCC user privacy protections by accident and design

adib — Sun, 04 Jul 2021 18:39:02 +0000

Article URL: https://labs.sentinelone.com/bypassing-macos-tcc-user-privacy-protections-by-accident-and-design/

Comments URL: https://news.ycombinator.com/item?id=27731684

Points: 159

# Comments: 32

CVE-2020-9771 is not fixed correctly (2020)

adib — Sun, 04 Jul 2021 18:30:41 +0000

Article URL: https://theevilbit.github.io/posts/cve_2020_9771/

Comments URL: https://news.ycombinator.com/item?id=27731637

Points: 73

# Comments: 4

New comment by adib in "Free Unix (1983)"

adib — Mon, 22 Mar 2021 06:49:21 +0000

... fair enough, at one point he wrote most of the user-space utilities in Linux. Although he hasn't gotten around to the kernel, but half is better than nothing, and a free kernel is nothing without _free_ (as in _speech_) user-space utilities to accompany it.

How to Detect Apple Silicon and Rosetta from Within a Shell Script

adib — Fri, 11 Dec 2020 14:01:31 +0000

Article URL: https://cutecoder.org/software/detecting-apple-silicon-shell-script/

Hacker News: adib

New comment by adib in "The Framework Desktop is a beast"

New comment by adib in "New Mac Mini with M4"

New comment by adib in "New Mac Mini with M4"

New comment by adib in "The state of external retina displays"

New comment by adib in "RFC-0082: Runnning unmodified Linux programs on Fuchsia"

New comment by adib in "RFC-0082: Runnning unmodified Linux programs on Fuchsia"

New comment by adib in "Apple’s new abuse prevention system: an antritust/competition point of view"

New comment by adib in "Apple’s new abuse prevention system: an antritust/competition point of view"

New comment by adib in "Apple’s new abuse prevention system: an antritust/competition point of view"

New comment by adib in "Cloudflare's inaccessible browser contradicts the company's mission"

New comment by adib in "Bypassing macOS TCC user privacy protections by accident and design"

New comment by adib in "Bypassing macOS TCC user privacy protections by accident and design"

New comment by adib in "Bypassing macOS TCC user privacy protections by accident and design"

New comment by adib in "Bypassing macOS TCC user privacy protections by accident and design"

Bypassing macOS TCC user privacy protections by accident and design

CVE-2020-9771 is not fixed correctly (2020)

New comment by adib in "Free Unix (1983)"

How to Detect Apple Silicon and Rosetta from Within a Shell Script

Meet-Up Video: All About In-App Purchases

How to Run Legacy Command Line Apps on Apple Silicon