Massachusetts Attorney General has ID Stolen, Investigating iTunes With Official Power

Paul Roberts:

Massachusetts Attorney General Martha Coakley said on Tuesday that her office would be inquiring into long-standing complaints about fraudulent purchases that leverage Apple’s popular online music store.

In a lunchtime address to business and technology leaders in Massachusetts, Coakley said she was a victim of identity theft in recent months, and that her stolen credit card information was used to make fraudulent iTunes purchases.

Seems like a perfectly reasonable use of state resources.1

Continue reading ⇢

How to Return the "Bounce Message" Feature to OS X Lion Mail

In previous versions of OS X, Apple’s Mail app included a feature named Bounce. This allowed users to send email back to the sender, making it look like the address wasn’t valid. Here’s what a bounced message looks like. I sent myself an email (from my Mobile account to my email address for this site), then bounced it back:

Bounced

It was great for spam and emails from the mother-in-law.

Continue reading ⇢

Finder Stuck in "Restore Windows" Loop? Here’s a Fix.

Screen Shot 2011 09 18 at 5 29 43 PM

There seems to be an issue in OS X Lion in which, under the right circumstances, Finder will crash and restart, showing the above dialogue box for a few moments, before crashing again. The cycle is endless, from what I saw today on my iMac.

I have no idea how widespread the issue is, as I don’t spent a ton of time around sick Macs anymore, but I thought I’d share what fixed it for me.

Continue reading ⇢

OS X Lion Passwords Easily Reset?

Patrick Dunstan has spent some time poking around the way OS X Lion stores user passwords, and his findings are disturbing:

This ShadowHashData attribute actually contains the same hash stored in user bob’s shadow .plist file. The interesting thing about this? root privileges are not required. All users on the system, regardless of privilege, have the ability to access the ShadowHashData attribute from any other user’s profile.

[…]

Now, if the password is not found by the dictionary file you’re out of luck, right? Well, no! Why crack hashes when you can just change the password directly! It appears Directory Services in Lion no longer requires authentication when requesting a password change for the current user.

Continue reading ⇢

Terry Lucy, on Minimal Computing

On his blog:

I can’t bring myself to download and try new applications before I have mastered what came out of the factory.

[…]

I am sure there will come a time where I need to branch out and download more applications, but for now Chrome, Spotify, Skype, Dropbox, Twitter for Mac and Evernote are doing me just fine.

Terry has realized something great — the Mac comes with enough tools for just about anyone to start using it, right out of the box.

Continue reading ⇢