Automatic logon can be enabled for Windows, or Mac OS X. We already discussed disabling automatic logon using a script for Windows, so let’s look at doing so for Mac OS X. The variable that controls automatic logon is stored in /Library/Preferences/com.apple.loginwindow.plist in the autoLoginUser key. By default automatic logon is disabled and so you can simply delete that key to disable it, which you can do with the following command: defaults delete /Library/Preferences/com.apple.loginwindow autoLoginUser You can also enter an autoLoginUser into the field to define the user who will automatically be logged in. You may remember that the loginwindow defaults domain is the same location that login hooks are…
-
-
Mac OS X 10.5: Screen Sharing as an Application
I originally posted this at http://www.318.com/TechJournal Screen Sharing is a new feature in Leopard that allows you to control machines that appear in your side bar. However, you can actually open Screen Sharing and use it in a similar manner as how you use an application like Chicken of the VNC (although not with an identical feature set). The way you go about this is to create a shortcut to the Screen Sharing application bundle from the /System/Library/CoreServices/Screen Sharing.app file somewhere else, such as the Applications folder, or maybe just put it in your dock. Then you can run the following command: defaults write com.apple.ScreenSharing ShowBonjourBrowser_Debug 1 You will now…
-
AppleScript and Paths
When you’re using Applescript to script some events, you’ll need to use a path. For example, if you’re opening an application, you can use the launch application option. When you do so, you’ll need to swap out slashes (/) with colons (:). So, let’s look at Mail.app. The following command in bash would open Mail: open /Applications/Mail.app But to run in Applescript, use the following command: launch application ":Applications:TextEdit.app" or tell application ":Applications:TextEdit.app" to launch Enjoy
-
Recursively Remove ACLs
The following command can be used to recursively remove all ACLs from a tree of your folder hierarchy: chmod -RN /path/to/directory
-
Spotlight Keystroke Luv
Command-Spacebar can be used to invoke the spotlight box. Then type the name for an application and hit enter. This will open the app.
-
HOWTO: arp poisoning made easy
So arp can display the table for name to Ethernet address resolution. That’s pretty easy, just run arp with a -a flag and it will show you all the other systems in your arp table. the table is managed dynamically. But what if you wanted to set one in there statically. Well, you could use the arp with a -s flag followed by the host name and then the ethernet address you want to assign for that host name. If you point a host name to an invalid address then you’ve poisoned your arp cache.
-
Mac OS X: Forensics
It’s old but it’s good: http://www.afp548.com/Articles/security/postmortem.html
-
Launch Safari with Tabs
Safari, and the resulting tabbed browsing, can revolutionize the way you work with the web. If you would like to keep the tabs in your browser, even if you don’t have a second tab (ie – if you’d like to test the size or look of your environment) then you can have the browser open with a single tab by default. com.apple.Safari.plist has a number of settings that aren’t exposed in the graphical interface of Safari. The AlwaysShowTabBar key can be used to set this behavior. For example: defaults write com.apple.Safari AlwaysShowTabBar -bool YES You can undo this with: defaults write com.apple.Safari AlwaysShowTabBar -bool NO
-
SANS Mac OS X Security Checklist
A project I worked on with the SANS Institute: https://www.sans.org/score/macosxchecklist.php
-
Mac OS X Log Analysis
Mac OS X has a lot of options for logging data. But these options can actually cause a lot of white noise. So there are two tools that you should look at if you’re interested. The first is Splunk: http://www.splunk.com/LogAnalysis The second is Sawmill: http://www.sawmill.net