macOS Archive

It's widely expected at this point that Apple will rebrand Mac OS X to simply 'macOS' next week at WWDC, but hidden in today's announcements regarding the App Store was yet another hint at the change. In a FAQ from on the iTunes Connect website, Apple mistakenly refers to Mac OS X as 'macOS,' again prematurely hinting at the change.

On March 4, we detected that the Transmission BitTorrent client installer for OS X was infected with ransomware, just a few hours after installers were initially posted. We have named this Ransomware "KeRanger." The only previous ransomware for OS X we are aware of is FileCoder, discovered by Kaspersky Lab in 2014. As FileCoder was incomplete at the time of its discovery, we believe KeRanger is the first fully functional ransomware seen on the OS X platform.

Attackers infected two installers of Transmission version 2.90 with KeRanger on the morning of March 4. When we identified the issue, the infected DMG files were still available for downloading from the Transmission site Transmission is an open source project. It's possible that Transmission's official website was compromised and the files were replaced by re-compiled malicious versions, but we can't confirm how this infection occurred.

File this one under "Obscure problems that could ruin your day." TidBITS reader Randy Singer reports that due to an expired certificate, OS X installers downloaded prior to 14 February 2016 won't work.

The Apple Worldwide Developer Relations Intermediate Certificate is required for all apps in the Mac App Store, including OS X installers. When used to sign an app, the certificate enables OS X to confirm that the app has not been corrupted or modified by an attacker. This certificate expired on 14 February 2016, causing error dialogs and preventing some apps from launching. Most apps affected have already been updated with the new certificate. But if you downloaded an OS X installer in case of trouble, you may be in for a surprise the next time you try to use it.

There are a number of reasons for Sketch leaving the Mac App Store - many of which in isolation wouldn't cause us huge concern. However as with all gripes, when compounded they make it hard to justify staying: App Review continues to take at least a week, there are technical limitations imposed by the Mac App Store guidelines (sandboxing and so on) that limit some of the features we want to bring to Sketch, and upgrade pricing remains unavailable.

Mac users faced trouble with their apps overnight after the security certificate Apple uses to prevent piracy expired late on Wednesday.

Applications downloaded from the Mac App Store were temporarily unavailable from 10pm UK time, when a security certificate expired, five years after its creation, with no replacement immediately available.

Even once Apple fixed the error, issuing a new certificate for the apps (with an expiry date of April 2035, this time), users were still faced with problems. Those who could not connect to the internet couldn’t verify the new certificate, while those who had forgotten their password or couldn’t log in to iCloud for some other reason are also unable to use the downloaded apps until they can log in to the service.

I thought it'd be a "fun" project to see what the "El Capitan License" actually says. Cool idea, huh? Kind of like spelunking through a cave that everyone says they’ve been through, but maybe no one really has. What will I find wedged in a wall or lurking in the dark around the next turn?

System Integrity Protection (SIP, sometimes referred to as rootless) is a security feature of OS X El Capitan, the operating system by Apple Inc. It protects certain system processes, files and folders from being modified or tampered with by other processes even when executed by the root user or by a user with root privileges (sudo). Apple says that the root user can be a significant risk factor to the system's security, especially on systems with a single user account on which that user is also the administrator. System Integrity Protection is enabled by default, but can be disabled.

Really, this is the first time in several years that iOS and OS X have felt like they've gotten (and needed) the same amount of attention from Apple - both get to spend a release in the slow lane as Apple puts its marketing muscle behind newer platforms like the Apple Watch and the new Apple TV. Like iOS 9 (and Mountain Lion, and Snow Leopard), El Capitan is about refinement. Yosemite's big statement was "This is what OS X looks like now." El Capitan's is a relatively meek "Hey, I have a couple neat tricks to show you."

Apple needs to change its priorities for the Mac App Store or just shut the whole thing down. As it now stands, developers who are tired of being second-class citizens are making that decision for them and leaving on their own.

It is showing hidden files (that have names starting with a dot) when invoked by root and doesn’t show them (as expected) when running as a normal user. This differs from what ls on Linux (the one coming from coreutils) does.

Why does ls behave this way?

Looking across the updates in El Capitan, the story is clear: Apple is making life way better for people who live in its ecosystem. But if you don't live in Apple's garden, the benefits are less clear. Yes, it's faster and there are bugfixes all around, but to take advantage of Apple's updates you really need to use Apple's apps.

For the first time in several years, Apple is changing up its annual iOS and OS X upgrade cycle by limiting new feature additions in favor of a "big focus on quality," according to multiple sources familiar with the company's operating system development plans. We first reported in February that iOS 9, codenamed "Monarch," would heavily feature under-the-hood optimizations, and we've now learned that Apple is taking the same approach with OS X 10.11, codenamed "Gala." Sources have revealed additional new details on how Apple will optimize the new operating systems for improved stability and performance, add several new security features, and make important changes to its Swift programming tools for developers.