Kibbles & Bytes Blog

  • Lion Security Flaw

    A flaw was recently discovered in OS X Lion that allows any user on the Mac to extract a file containing an administrative user’s password. As with past versions of OS X, user passwords are encrypted and stored securely as “shadow files” within the computer’s hard drive. Those files can then only be accessed by that specific user, or administrators, with proper authentication. The flaw with this procedure in Lion is that these files can be accessed by any user on the Mac. So, a Standard or heavily restricted user could potentially obtain an encrypted file containing an Administrator’s password from which the password can be extracted.

    The necessity of local access is what restricts this issue the most. The hacker would need to have physical access to your machine. Hopefully this goes without saying, but allowing a potentially dishonest person unsupervised physical access to your machine is never a good idea. Properly securing your Mac by turning off Automatic Login, using strong passwords (letters, numbers, and characters) and even requiring a password immediately after your system has it’s screen saver going, which can be done in the Security Preference pane, are some simple yet substantial security measures.

    It is also possible for the hacker to remotely log into the Mac and grab these password files, but this would require conscious configuration on the Mac owner’s part, as well as the hacker’s knowledge of a valid username and password.

    I’m confident that Apple will release a Lion Software Update soon enough to correct this issue. In the meantime, however, it is a good idea to utilize the aforementioned security steps, and always keep in mind: there’s no security like physical security.

  • Lion Mail

    I upgraded my workstation Friday night to Lion, and have been living with it since then. Up until now, I’d only just played around on showroom computers and clicked around while resolving customers’ issues in the tech room. Since I transitioned to it on my own computer, I’ve had some trouble getting used to the new interface and gestures.

    I’m still not completely up to speed with all the new features, and some of the new gestures have me somewhat stumped. For example, in Mail under previous versions of MacOS X, one could two-finger swipe to go from one mail message to the next. This same gesturing would allow you to swipe between conversations in iChat. Now, that two finger swipe defaults to moving between spaces. I haven’t taken the time quite yet to investigate how to change these things to better suit me, but I’m sure the options exist. That’s an article for next week.

    The two finger swipe still allows you to go back and forward in Safari, which is tremendously useful; in fact, the animation under Lion as you go back and forward is very slick, and webpages back and forward appear almost instantly under Lion. It’s much better than in previous versions.

    A specific problem I’ve had in Mail is the new layout. It doesn’t suit me just yet, and perhaps next weekend, when I don’t need to be working at my most efficient, I’ll give it another try. But poking around in the Mail preferences, under Viewing, I located a checkbox to go back to Classic view. Once I clicked that, I was presented with my old friend. You can revert to Classic view by navigating to *Mail > Preferences > Viewing > Classic Layout*.

    What are your favorite new features in Lion?

  • Happy Tuesday,

    The leaves are changing quickly here in Vermont. Just last week there was little color to be seen in central Vermont, except for higher elevations, but by the end of the weekend fiery oranges and reds could be seen everywhere. It’s a wonderful time of year to visit Vermont, and our brave little state could sure use the commerce after the calamitous flooding late last month.

    Most of our roads and bridges are open again, so unfettered travel is possible through 99% of the state. Now and again we see customers take detours from planned routes to visit our stores in their travels. Just the other day a customer from Ohio stopped by the Waitsfield store, asking to speak with me–he’d been a Tech Tails reader for more than ten years. It takes a special kind of company and a special kind of customer for that interaction to happen, and it’s heartwarming to be a part of it.

    We have two new additions to our technical services team. Lance Putnam and Michael Burl are getting up to speed in our South Burlington facility, and I know they’ll both bloom into highly productive members of the team. Come by and say hi!

    As always, thanks for reading, and keep in touch.

    Matt
    “matt@smalldog.com”:mailto:matt@smalldog.com

  • !http://blog.smalldog.com/images/2578.jpg!:http://www.smalldog.com/dealretriever


    Grab a Survivor Kit at *50% off* for either your iPod touch or iPhone 4! *Each special includes a Hammerhead Aura Case, Chill Pill Audio AC Adapter/Charger and a USB-to-dock connector cable for $19.99 + free shipping!* (over $40 retail value)

    Because we want to give you the best deals AND stay in business, Deal Retriever deals are valid for one week only. Hammerhead case for iPhone 4 fits AT&T model only. Quantities are limited; offers good while supplies last.

  • Vermont eWaste Event

    Last week, we experienced some technical difficulties with our blog so we apologize for so few posts. We’d like to make it up…