average admins

Originally posted at cocoacrusty.com on Thursday, November 8th, 2007

Well, the upgrade to Mac OS X Leopard went smoothly, as Wooley predicted in his comment on my previous post.

The whole upgrade took about an hour and 15 minutes (which included verifying the install DVD) on my MacBook. I now am running the latest and greatest version of Apple’s OS, a certified flavor of UNIX, and am, so far, extremely impressed. The dock is beautiful, Stacks look extremely useful and efficient, there are a lot of desktop customizable features, Spaces (which I am looking forward to setting up soon), and more.

I look forward to getting a bit more intimate better acquainted with Leopard in the upcoming days and months. Anyway, the upgrade went smoothly. If you’re scared, don’t be. Mine was a breeze! I just wish I had upgraded the day this package arrived on my doorstep…

uname Output:

% uname -a
Darwin xbook 9.0.0 Darwin Kernel Version 9.0.0: Tue Oct 9 21:35:55 PDT 2007; root:xnu-1228~1/RELEASE_I386 i386

Until next time…

Originally posted at cocoacrusty.com on Thursday, November 8th, 2007

I have had Apple’s latest release of Mac OS X, Leopard, since it launched a couple of weeks ago. I used my in-store credit from my iPhone purchase reimbursement from when I purchased my iPhone 45 days too early for the price drop… or something… Anyway, I got Leopard and tonight I’m gonna install it!

Backups are running as we speak… I’m jonesing as we speak… I’m ready to install this new OS!!!! I’ll let you know how it goes…

Until next time…

Originally posted on cocoacrusty.com on Monday, April 16th, 2007.

This post is the reason I posted my previous blog entry on installing the Metasploit framework on my Apple MacBook. Chris sent me a link to this movie showing someone exploiting a vulnerability in Microsoft’s Windows. The .ANI Header Stack Overflow vulnerability allows a remote attacker to send a malicious e-mail to an unsuspecting user with an unpatched Windows machine and gaining remote shell access.

After Metasploit was installed on my MacBook, I followed the steps in the movie as they were shown and it worked like a champ. The recipient of the e-mail has to be viewing the e-mail in HTML. I was only able to exploit this vulnerability when using Microsoft Outlook or Microsoft’s Outlook Express e-mail client’s when the client was setup to view messages in HTML. Either way, I gained access to one of my own machines using this exploit and it showed me just how easy it would be for someone with malicious intent to really wreak havoc on a novice or unsuspecting user.

I am impressed at the whole concept behind the Metasploit framework for exploiting known vulnerabilities and delivering payloads with basically the push of a button. The interface and command logic is easy to understand, for this exploit anyway, and I look forward to learning more about the framework, the exploits, and the payloads in the near future.

Until next time…

Originally posted at cocoacrusty.com on Monday, April 16th, 2007.

I have known about the Metasploit framework for quite some time but have never really known how to use it or taken the time to learn. Recently, Chris inspired me to try it by showing me a movie explaining how to exploit a vulnerability in Microsoft Windows related to the .ANI Header Stack Overflow Vulnerability (more on this in my next post).

Before I could begin working with this nifty little exploit in Metaspolit I had to get the framework installed on my MacBook. Metasploit is a suite of Ruby scripts and will run on virtually any Unix based operating system and Windows (with some minor tweaking). I checked the MacPorts for Metasploit and it was available as a port install but the latest version in the ports tree was 2.7. I needed at least version 3.0, and later determined I needed a development version, version 3.1, from the trunk to get the exploit I was after.

The first thing I did was upgrade my Subversion client on Mac OS X. I got the universal binary from here and installing and upgrading my Subversion was pretty painless. It installed like most other Mac applications from a package.

(more…)

Originally posted at cocoacrusty.com on March 27th, 2007.

I first saw this nice little trick a year or so ago. A fellow admin and friend of mine, Tommy, used a Bluetooth® headset to automatically lock his Windows machine whenever he stepped away from his computer and his headset was no longer in range of his PC’s Bluetooth® dongle. I don’t remember how I stumbled upon this blog post yesterday, but I am glad I did. This post shows you how to implement a similar solution using an application called Proximity and some Apple Scripts to achieve the same result.

The cool thing about this solutions for the Mac is that the events that are triggered when the specified Bluetooth® device enters and leaves the Mac’s Bluetooth® proximity are Apple Scripts. Apple Scripts allow you to easily program for the Mac. Apple Scripts are pretty much the same thing as shell scripts for any other operating system and command line environment, like batch scripts for Windows and Bash or C Shell scripts for Unix based and derived operating systems like Linux and FreeBSD. Basically, with a solution like this, you aren’t tied to the developer’s ideas of what should happen when you step away from your machine. The ball is totally in your court and your goal is only limited by your creativity and your programming ability.

(more…)

Originally posted at cocoacrusty.com on March 27th, 2007.

Ok, so I blogged a while back in November of 2006 about being back in the wardriving game. Well, it turns out, that wasn’t entirely true. See, after I posted that entry on averageadmins.com, I never really did any wardriving. When I finally got ready to get back in the game and make some maps and what not using KisMAC and Google Earth, my MacBook’s built-in wireless NIC wasn’t 100% compatible with KisMAC. It seems that the 2nd generation of MacBooks changed their wireless chipsets and the new chipset isn’t 100% compatible with KisMAC. So, according to this document on the KisMAC developer WiKi, my best bet was to get a USB wireless NIC with a Prism2 chipset. So I did…

The bad thing about having to get this type of hardware is a) most of the devices with these chipsets are older wireless cards and kind of hard to locate, or b) the newer cards that are still manufactured with this chipset are pretty pricey. Well, I did a little eBaying and found a D-Link DWL-122 for around $60 with shipping and insurance. This was a great find as this device was still new in the box and the price wasn’t that bad considering I had to locate an affordable wireless card with a specific chipset. I placed my order on the 20th of this month and got it in yesterday… Guess what?! That’s right kids! I’ve already put it to use.

(more…)

Originally posted at cocoacrusty.com on Wednesday, March 21st, 2007.

I have been fascinated with the Mac Mini for quite sometime and actually thought that this piece of hardware would be my entrance into the world of Macintosh due to its size, price, and the fact that you can use your already existing DKM. When I purchased my MacBook from the Apple Store in Plano, Texas, I talked with a salesperson about the Mac Mini. She said that a lot of people were purchasing the Mini for use as a server. I thought that was an extremely cool idea.

Think about it. Most data centers aren’t getting any bigger. Every server manufacturer out there is trying harder and harder to cram more and more into 1U rackmount servers. Even so, the length of these machines is way too long. I mean, you took a tower server and squashed it down to like an inch to an inch and a half tall but the rest had to be flattened out and spread over a larger footprint. The Mac Mini measures 2 inches tall and is 6.5 inches square. How many of those things can you fit on the real estate a 1U server takes up?! A lot!

(more…)

Originally posted at cocoacrusty.com on Wednesday, March 21st, 2007.

I have had my 30 GB Video iPod for a while and have been using my MacBook since late 2006. I bought my iPod at WalMart and it came formatted for a Windows machine. This was fine and all when I used a Windows machine and FreeBSD because I could read and write to the iPod with no problems as well as update the iPod via my Windows PC (yes, I have one… I’m sorry…). However, since I have been using my MacBook full time I haven’t been able to update my iPod’s software from 1.2 to 1.2.1 because it was formatted for Windows, I was too lazy to boot up my Windows machine, and I was honestly a little afraid to click on the “Restore” button within iTunes for fear of hosing my iPod.

Today, while working at a remote disaster recovery location, I had a few minutes to spare while a server booted up and recognized some new tape drives to press that “Restore” button within iTunes. I was scared, yes, but I did it. I clicked it! As soon as I did, iTunes told me that all of my music would be deleted from the iPod and the iPod would be returned to the factory settings. I accepted this and told iTunes to continue with the restore. As it was wiping my iPod it also upgraded my iPod to the latest version of the iPod software, version 1.2.1, and obviously, formatted the iPod with a Macintosh file system.

Now, as software updates are released for the iPod I don’t have to feel left behind due to laziness and fear any longer. I always use my Mac and can just update it inside iTunes at the click of a button. I’m glad I “made the switch” to Macintosh, both in my normal computing environment (i.e. my laptop) and in my iPod file system.

Until next time…

Originally posted at cocoacrusty.com on March 15th, 2007.

I stumbled upon this article the other day when I was reading through some of the blogs I monitor in Bloglines. The article is from O’Reilly’s MacDevCenter.com site and is about a patent filed by Apple in August of 1982 and granted in December of 1985 for a flip phone in the shape of an apple with a bite taken out of it. In other words, the phone is in the shape of the Apple logo.

If you review the patent through some nifty patent interface provided by Google, you’ll see 13 drawings (Fig. 1 - Fig. 13) of what the proposed phone would have looked like. This is pretty cool to know that Apple had an idea for a phone over 20 years ago. I am also very glad that this phone didn’t make it to market and that the iPhone will be their first cellular phone offering. If they had released this flip-phone back in the late 80’s or early 90s, they may not be around today to give us phone addicts the iPhone.

Until next time…

…Why Don’t I Back That Thing Up?!

Originally posted at cocoacrusty.com on March 5th, 2007.

I’m just trying to tell you, I do a lot of development on my laptop and have a lot of Photoshop files, code, etc. for my client’s web sites and other applications I have developed for Fruitful Solutions. I also have a ton of music in my iTunes music library. I have e-mails from clients that I need to hang on to and other important things that matter to me and I feel like I need to back this stuff up. Before I go on, if you have data, you need to be backing that stuff up. And here we go…

I have been backing up my MacBook to a USB 2.0 IDE drive cage with a 120GB Western Digital drive in it for a few months now using an application called Personal Backup X4 from Intego. This application has everything I was looking for in a backup solution.

I currently do what the software calls Synchronizing. Basically, it is an incremental backup. The first time you run the script, it performs a full backup. Then each run after that it only backs up any files that have been added or modified since the last synchronization and will also delete any files that are no longer on the source disk from the disk you’re backing up to.

You can also create disk images, archives, and even make bootable copies of your harddrive with this software. Like I said, I have been using this software for a while now and love it. I like knowing that my data is backed up and that I can customize my backup job with little to no effort using the intuitive interface Personal Backup provides.

If you’re looking for an inexpensive ($69.95) commercial backup solution for your Mac, I highly recommend you give Personal Backup a try. There is a free trial available for those of you who like to try before you buy. If you try this application, I can almost guarantee you will be impressed with its ease of use and feature set. Of course, I say “almost guarantee” because some people just can’t be pleased and then some don’t want to pay any kind of money for software these days. Hasn’t FOSS just spoiled us all?!

Until next time…