Welcome back! I get the impression I was the only one to take a while off this summer. So many post to sort through and link to…
I will be presenting at Virtual JNUC2020 this year. My session is “Scripting Jamf: Best Practices” (JNUC307) and is scheduled for Oct 1 at 11am CT (18:00 Central European time). The entire session schedule can be reviewed on their site and you can still register for free!
I am also preparing something for the MacSysAdmin Online. This will be a free online event this year where they will publish some of the best presentations from previous years and new content as well. You can support the team by buying the MacSysAdmin Online T-Shirt, which will also enroll you in an exclusive giveaway raffle.
If you would rather get the weekly newsletter by email, you can subscribe to the Scripting OS X Weekly Newsletter here!! (Same content, delivered to your Inbox once a week.)
News and Opinion
- 27-inch iMac gets a major update – Apple Newsroom (Note: Even though the 21“ iMacs now get SSD drives by default, Fusion drives are still an option and the 21” iMac is the last Mac model sold without a T2 chip.)
- Last hurrah? 27-inch iMac get Intel processor upgrade, all-SSD storage, T2 chip – Jason Snell, Six Colors
- Understanding How Apple Security Research Devices Likely Work and Stay Secure – David Shayer, TidBITS
- A Look at the Current 2020 Hard Drive Failure Rates – Andy Klein, Backblaze
macOS 11 Big Sur and iOS 14
- Preparing Your App to be the Default Browser or Email Client – Apple Developer Documentation
- Big Sur Beta not Showing up in Software Update + Troubleshooting – Mr Macintosh
- Big Sur Beta 5: Still Not Education Ready – Nathaniel Strauss
macOS Catalina 10.15 and iOS 13 Updates
MacAdmins on Twitter
- William Smith: “Small undocumented change with Policies in Jamf Pro 10.22 that I didn’t learn about until today: New policies no longer automatically include the Restart payload.”
- Victor (groob): “Instead of asking ”experts“ for how you’d go about doing something, tell them what you tried, and ask why it’s not working.”
- Anthony Reimer: “Intriguing. On the new 27-inch iMac, you can not customize the 256 GB of storage on the base model. You must move up to the middle model to get 512GB or more of storage.”
- Victor (groob): “Four betas. Four subtle ways Apple broke a core workflow in MDM zero touch provisioning. All undocumented.”
- Graham Pugh: “Jamf Self Service policies will not run on macOS 10.12 Sierra on Jamf Pro versions 10.22 and above. Jamf will not fix this as they drop support for Sierra in the next release.”
- Anthony Reimer: “I’ve updated my Mac Obsolescence chart with the new iMac (hopefully making an appearance in a home near me). obsolescence.jazzace.ca”
- Per Olofsson: “Companion niche tip: creating a sparsebundle from a folder and then converting it to a compressed read only dmg is multithreaded and faster than creating the dmg directly. In my testing the resulting dmg will also be smaller.”
- Neil Martin: “TIL in profilecreator if you long-click the export button, you can export your payloads as MCX-style plists – handy!”
- Erik Schwiebert: “Two month alert! Microsoft support for Office 2016 for the Mac ends on October 13, 2020”
Bugs and Security
- Exploiting popular macOS apps with a single “.terminal” file – Vladimir Metnew
- CVE–2020–9854: “Unauthd” – Ilias Morad, Objective-See
- Office Drama on macOS – Detecting sandbox escapes – Matthias Wollnik, Jamf Blog
- Office Drama on macOS – Patrick Wardle, Objective-See
- Patrick Wardle: “Excited to announce my new book series: ”The Art Of Mac Malware“ taomm.org 100% free online, Peer-reviewed & open for comments”
- XCSSET Mac Malware: Infects Xcode Projects, Performs UXSS Attack on Safari, Other Browsers, Leverages Zero-day Exploits – TrendLabs Security Intelligence Blog
- The vulnerability in Remote Login (ssh) persists – Howard Oakley
Support and HowTos
- Recommendations & Best Practices for Wi-Fi and Apple Devices – HCS Technology Group
- Managing Apple Devices: macOS commands & queries that require supervision – HCS Technology Group
- Jamf Pro and its certificates – Frederick Abeloos
- Moving devices from Adobe Shared Device License to Adobe Named User License – Darren Wallace
- PkgSigner AutoPkg processor updated for Python 3 – Rich Trouton
- TCC troubleshooting – DAM SAN
- Running recoverydiagnose in macOS Recovery – Rich Trouton
- Xsan Upgrade and Big Sur Prep. Hello Catalina! – DAM SAN
- Automagically Patching Your Fleet of Macs – Andrea Vail
- Mitigating Mac Enrollment Failures – Nathaniel Strauss
- Using UserVoice for Adobe products – Adobe (via Patrick Fergus)
- Going Kextless: Why We All Need to Transition Away from Kernel Extensions – Phil Stokes, SentinelOne (via Rich Trouton)
- macOS version numbering isn’t so simple – Howard Oakley
- Deploying Adobe Shared Device License (SDL) Over Older Versions of Creative Cloud – Darren Wallace
- Methods to perform an erase and install on macOS – Darren Wallace, dataJAR
- Which version is that command tool? – Howard Oakley
- Understanding the macOS authentication flow with FileVault and/or Jamf Connect – Frederick Abeloos
- Complementing Splunk SIEM with Jamf Pro inventory – Zentral
- The limits of password-protecting a .mobileconfig profile – Alan Siu
- Uninstalling Adobe Software – Darren Wallace
Scripting and Automation
- terminal2blink and Swift – Ed Marczak
- PatchBot Update – Tony Williams
- SimpleMDM/munki-plugin: A repository plugin for integrating Munki (and AutoPkg) with SimpleMDM
Updates and Releases
- Announcing Notifier – Ben Toms, dataJAR (GitHub)
- Malwarebytes for Mac 4.5 beta
- Surprise! Fujitsu Releases 64-Bit ScanSnap Manager for Older Scanners – Dave Kitabjian
- Jamf Pro 10.23
- MDMDirector 0.0.7
- 1Password for Linux development preview — 1Password Forum
- VMware Fusion Tech Preview (requires VMware login)
- Announcing: VMware Fusion 12 and Workstation 16
- Twocanoes Secure Remote Access
- Sinter: New user-mode security enforcement for macOS – Trail of Bits Blog
- Munki 5.1 Beta 1 Release
To Watch
To Listen
Just for Fun
- Felix Rieseberg: “I put an entire 1991 Macintosh Quadra with Mac OS 8.1 into an Electron app, together with a bunch of apps and games. It runs on Windows, macOS, and Linux… and JavaScript. Again: I’m sorry. Go grab it here.”
- am tiny: “Mac Pro Downhill Derby” (Image)
- Minecraft Server for My Kids and My Sanity – DAM SAN
Support
If you are enjoying what you are reading here, please spread the word and recommend it to another Mac Admin!
- Weblog
- Weekly Email Newsletter (TinyLetter)
- Apple News
- Micro.blog
- Mastodon.social
If you want to support me and this website even further, then consider buying one (or all) of my books. It’s like a subscription fee, but you also get a useful book or two extra!