sudo
Latest
OS X vulnerability allows superuser access to hackers
Another vulnerability has popped up in OS X, and this time it's not Java-related. The developers of Metasploit, a software utility that makes it easier for people to abuse vulnerabilities in OSes for security-testing purposes, have added a new Unix Sudo vulnerability to their software. As OS X runs a modified version of Unix, this means it is vulnerable. As Arstechnica reports: The authentication bypass vulnerability was reported in March and resides in a Unix component known as sudo. While the program is designed to require a password before granting "super user" privileges such as access to other users' files, the bug makes it possible to obtain that sensitive access by resetting the computer clock to January 1, 1970. That date is known in computing circles as the Unix epoch, and it represents the beginning of time as measured by the operating system and most of the applications that run on it. By invoking the sudo command and then resetting the date, computers can be tricked into turning over root privileges without a password. Apple has not commented on the bug, but the company is usually pretty quick to issue a fix once it is aware of them.
Sudo robot begrudgingly makes sandwiches on command
Not that we haven't seen cooking robots before, but there's just something distinctly awesome about one that whips up a sandwich. Particularly one that kvetches first, and then gives in and makes a sandwich. Bre Pettis' Sudo robot isn't exactly sophisticated -- anything more than a simple grilled cheese is asking a bit much -- but even that should be plenty for the average college student. Check the read link to see it in action, and don't be surprised to see Subway pick this up and tweak it for use with multiple toppings and condiments.[Via Digg]
Terminal Tips: Install software updates from the command line
Sure, you could update your Apple software by opening Software Update from the Apple menu. But what if you're inclined to use a command line interface, or maybe you need to update a remote machine via SSH? There's a way to complete a software update in Terminal.app. Here's how.If you want to do an automatic install of all the updates for your particular Mac, first log in as an administrative user. Then open Terminal.app (located in /Applications/Utilities), and type (or copy/paste) the following command: sudo softwareupdate -i -aand hit Return. Next, you'll be prompted to enter your password; do so, and then hit Return. The application will then look for available updates, download them, and then install them. You will see the progress in Terminal. If no updates are available, Terminal will let you know. This command replicates the functionality of the normal Software Update utility. However, you can use it on other machines in the background via SSH remote login, or you could apply a specific update rather than the full list of available patches. To see all the command options, type man softwareupdate at the Terminal prompt.Want more tips and tricks like this? Visit TUAW's Terminal Tips section!
Sudos and sudon'ts
I find that I'm visiting RixStep on a regular basis these days. Today I stumbled across this post about using root privileges and thought I'd share it with you. If you want to learn more about using Mac admin privileges, this might not be the best post to start. If you already have some familiarity with the command line and with Unix, you can learn more about what su does, how to authenticate yourself, and understand why this affects security in a handy ten-point check list. It's a little verbose, but there's a lot of good meat in the article.
Sudo versus root
Remember the good old days when we didn't have to worry about sudo or root? We have extensions, and we liked it! Why, I remember when OS X couldn't even burn a CD! Ah, OS 9 how we miss you.Just kidding, OS 9 sucked (that's a joke too. Sheesh, lighten up, folks). Thanks to our new Unix overlords we Mac folk should know the difference between sudo and root and this post on Linux Box Admin explains it.Read it, learn it, and love it (in that order).
