H Ck Mac OS X

Total Page:16

File Type:pdf, Size:1020Kb

H Ck Mac OS X Hck Mac OS X Tips and tricks for Mac OS X hack Summary Introduction Exploitation of target mode Exploitation of physical memory Exploitation of user privileges Conclusion Introduction Introduction Exploitation of target mode Exploitation of physical memory Market Share Exploitation of user privileges Conclusion Mac vs Windows Introduction Exploitation of target mode Exploitation of physical memory Market Share Exploitation of user privileges Conclusion by continent Introduction Exploitation of target mode Exploitation of physical memory Mac OS X history Exploitation of user privileges Conclusion 1996 : Purchase of NeXT and NeXTSTEP OS by Apple 1996 : Come back of Steve Jobs within Apple (left in 1985) 1999 : First version of Mac OS X server (1.0) 2001 : First version of Mac OS X Workstation (10.0 Cheetah) 2006 : First Mac(Book) without PowerPC processor and with Intel processor Introduction Exploitation of target mode Exploitation of physical memory Mac OS X architecture Exploitation of user privileges Conclusion UNIX system Based on Darwin OS (hybrid kernel XNU) Kernel XNU is based on micro-kernel of NeXTSTEP (Mach) and kernel of BSD (FreeBSD) But Darwin doesn’t contain graphical motor “Quartz” Introduction Exploitation of target mode Exploitation of physical memory Mac OS X architecture Exploitation of user privileges Conclusion Mach Applications services Mac interfaces IO Toolkit Login Windows EFI BSD Quartz/Aqua Platform Expert Launchd Finder/Dock Core services Applications Hardware Darwin (Mach) OS X Kernel space User space Exploitation of target mode Introduction Exploitation of target mode Exploitation of physical memory About target mode Exploitation of user privileges Conclusion During the starting > press “T” Access not protected by default I@@5779GGHCH<9R@9GGMGH9A8=G?H<FCI;<R@9GA5B5;9F Introduction Exploitation of target mode Exploitation of physical memory Alternatives Exploitation of user privileges Conclusion Single mode (press “Apple + S”) From live OS in USB/CD device > Press “Alt” From Mac OS X installation DVD > Press “C” and select Reset Password from installer Introduction Exploitation of target mode Exploitation of physical memory Identify system users Exploitation of user privileges Conclusion User UID in /private/var/db/dslocal/indices/Default/index User privileges in /var/db/dslocal/nodes/Default/groupe/admin.plist Introduction Exploitation of target mode Exploitation of physical memory Identify system passwords Exploitation of user privileges Conclusion Hashes passwords in /var/db/shadow/hash Find clear password with brute force attack (JTR) Introduction Exploitation of target mode Exploitation of physical memory 6CIH$9M7<5=BR@9 Exploitation of user privileges Conclusion $9M7<5=BR@9GHCF9GG97F9HG85H5@=?9Safari passwords, WIFI keys, Skype username/password, Google username/password (contact, Picasa), Exchange username/password, ... Introduction Exploitation of target mode Exploitation of physical memory (D9B$9M7<5=BR@9G Exploitation of user privileges Conclusion For each user, Keychain is stored in /Users/<USER>/Library/ Keychains/login.keychain $9M7<5=BR@9G5F9DFCH97H986M?9M7<5=BD5GGKCF8 "HQGDCGG=6@9HC=ADCFH5BM$9M7<5=BR@9GK=H<CIH?BCK the Keychain password Introduction Exploitation of target mode Exploitation of physical memory (D9B$9M7<5=BR@9G Exploitation of user privileges Conclusion But, you have to know “keychain” password to exploit it :( By default, “keychain” password is equal to user system password :-) Introduction Exploitation of target mode Exploitation of physical memory (D9B$9M7<5=BR@9G Exploitation of user privileges Conclusion You can identity password in volatility data You can attempt identify password by brute force attack Introduction Exploitation of target mode Exploitation of physical memory About Filevault encryption Exploitation of user privileges Conclusion B7FMDH=CBC:R@9GMGH9A, @=?9=H%C7?9FCF DM-Crypt I@@9B7FMDH=CB:FCA%=CBJ9FG=CB Only Home directory encryption for previous versions Native function from Mac OS X 10.3 “.dmg” images can use Filevault encryption Introduction Exploitation of target mode Exploitation of physical memory About Filevault encryption Exploitation of user privileges Conclusion Home directory without encryption Home directory with Filevault encryption Introduction Exploitation of target mode Exploitation of physical memory (D9B=@9J5I@HR@9 Exploitation of user privileges Conclusion =@9J5I@HR@9=GGHCF98=B/Users/<USER>/test.sparsebundle =@9J5I@HR@9G5F9DFCH97H986MD5GGKCF8 ... and it’s the same as <user> system password :-) ,C:FCAH5F;9HAC89=HQG95GMHC897FMDHH<=GR@9 Introduction Exploitation of target mode Exploitation of physical memory (D9B=@9J5I@HR@9 Exploitation of user privileges Conclusion You can identity AES key in volatility data ... Else, without access to hashes password, it is possible to 5HH9ADHHCRB8D5GGKCF86M6FIH9:CF795HH57? Exploitation of physical memory Introduction Exploitation of target mode Exploitation of physical memory Physical memory dump Exploitation of user privileges Conclusion From root access, MacMemoryReader can dump RAM MMR create temporary kernel extension to read /dev/ mem devices Introduction Exploitation of target mode Exploitation of physical memory Physical memory dump Exploitation of user privileges Conclusion 4'!!+%(#!56'! contained physical memory dump for safe mode (hibernation mode) FCA:I@@5779GG8=G?O,@99D=A5;9PR@975B69J=9K98 FCAF979BHJ9FG=CBGR@9=G9B7FMDH98 Configuration of encryption of “sleepimpage” (root privileges to modification) Introduction Exploitation of target mode Exploitation of physical memory Physical memory dump Exploitation of user privileges Conclusion Physical extraction ... + Tools to extract RAM > http://www.mcgrewsecurity.com Introduction Exploitation of target mode Exploitation of physical memory Physical memory dump Exploitation of user privileges Conclusion From DMA access, RAM dump is possible and EASY “pythonraw1394” libraries allow to dump RAM of 0=B8CKGGMGH9A:FCA%=BIL(2006 - Adam Boileau - Winlockpwn) “libforensic1394” (Freddie Witherden) libraries allow to dump +&C:&(,1:FCA(,1CF%=BIL Introduction Exploitation of target mode Exploitation of physical memory DMA access - PoC Exploitation of user privileges Conclusion Using of “libforensic1394” libraries is very easy :-) and allow to write code to dump RAM ... Introduction Exploitation of target mode Exploitation of physical memory Exploit DMA access Exploitation of user privileges Conclusion DEMO $..+ -/ ()'*#-+*.", 0% !*!2+'*%.6,!1%,!!--#%)-.$.(' Introduction Exploitation of target mode Exploitation of physical memory Identify secret data Exploitation of user privileges Conclusion Identify current username for a locked session (open without auto logon) Identify password for a locked session (open without auto logon) Introduction Exploitation of target mode Exploitation of physical memory Identify secret data Exploitation of user privileges Conclusion Identify current username for a locked session (open with auto logon) Identify current password for a locked session (open with auto logon) Identify just username for a locked session after startup Introduction Exploitation of target mode Exploitation of physical memory Identify secret data Exploitation of user privileges Conclusion A lot of others data secret are into physical memory like : Email / Calendar data (:R798C7IA9BHG85H5 Web passwords Software passwords Keychain password ... Introduction Exploitation of target mode Exploitation of physical memory Identify secret data Exploitation of user privileges Conclusion AES 128 key used for Filevault encryption can be found into physical memory and allows to : 97FMDH9B7FMDH98<CA98=F97HCF=9G5B8:I@@9B7FMDH988=G?G%=CBJ9FG=CB Identify secret data in hard disk (like system passwords) Unlock system ,$9MRB8HCC@75B9LHF57H,?9MG Introduction Exploitation of target mode Exploitation of physical memory Identify secret data Exploitation of user privileges Conclusion Passware Kit 11.3 can extract and exploit the found keys Introduction Exploitation of target mode Exploitation of physical memory Identify secret data Exploitation of user privileges Conclusion P0C to identify Web and software passwords Introduction Exploitation of target mode Exploitation of physical memory Identify secret data Exploitation of user privileges Conclusion P0C to identify Web and software passwords Introduction Exploitation of target mode Exploitation of physical memory Identify secret data Exploitation of user privileges Conclusion P0C to identify Mac OSX passwords Introduction Exploitation of target mode Exploitation of physical memory Identify secret data Exploitation of user privileges Conclusion P0C to identify Mac OSX passwords Introduction Exploitation of target mode Exploitation of physical memory Identify secret data Exploitation of user privileges Conclusion Is it possible to extract secret data when full encryption is 57H=J5H98%=CBJ9FG=CB6M&5779GG YES ! but NO if : System is not started (pre-boot authentication screen) System is hibernated in forcing to remove power from RAM (hibernatemode=25) 'H<9D5F5A9H9FHCF9ACJ9R@9J5I@H?9MG=B+&=G57H=J5H98 (destroyfvkeyonstandby=1) Introduction Exploitation of target mode Exploitation of physical memory Writing physical memory Exploitation of user privileges Conclusion ... to bypass session password with “libforensic1394” libraries ! but ... it doesn’t work :-( Introduction Exploitation of target mode Exploitation of physical memory Writing physical memory Exploitation of user privileges Conclusion Inception tool (breaknenter.org) will
Recommended publications
  • Secure Browser Installation Guide –
    Commercial Online Banking: Corporate First Mid Bank & Trust Commercial Online Banking Secure Browser Installation Guide for Mac Commercial Online Banking: Corporate Commercial Online Banking Secure Browser Commercial Online Banking Secure Browser is a secure solution that helps to provide a hardened stance against fraud. From new client implementation to ongoing support, Secure Browser offers a smooth customer experience. • Secure Site Access with consistent user & device authentication • Not susceptiBle to malware attacks • Prevents misdirection of users to false sites • Reduce risk By avoiding sites with malware • Eliminate hard tokens or 3rd party security products • Data integrity Getting Started - Installation In order to access Commercial Online Banking, users must install the Secure Browser on your PC. First Mid’s Secure Browser is a java-based application that runs on a user’s computer and which provides a captive, safe environment for accessing Commercial Online Banking and other weB sites that are permitted to the company by First Mid Bank & Trust. Secure Browser is a fully self-contained browser that does not use any other internet browser previously installed on a user’s computer, thereby insulating it from any malware that might Be attached to those other browsers. Users are allowed access to only web sites and applications defined and configured by the bank. Secure Browser does not produce an address line, so it is impossible for users to navigate away from entitled sites. All users are required by First Mid Bank & Trust to use the Secure Browser to access Commercial Online Banking. Getting Started • Secure Browser Installation | 2 Commercial Online Banking: Corporate Before You Begin Ensure You Have: • Strong internet connection • Administrative User privileges for the computer Secure Browser is to Be installed.
    [Show full text]
  • Mac OS X Server Administrator's Guide
    034-9285.S4AdminPDF 6/27/02 2:07 PM Page 1 Mac OS X Server Administrator’s Guide K Apple Computer, Inc. © 2002 Apple Computer, Inc. All rights reserved. Under the copyright laws, this publication may not be copied, in whole or in part, without the written consent of Apple. The Apple logo is a trademark of Apple Computer, Inc., registered in the U.S. and other countries. Use of the “keyboard” Apple logo (Option-Shift-K) for commercial purposes without the prior written consent of Apple may constitute trademark infringement and unfair competition in violation of federal and state laws. Apple, the Apple logo, AppleScript, AppleShare, AppleTalk, ColorSync, FireWire, Keychain, Mac, Macintosh, Power Macintosh, QuickTime, Sherlock, and WebObjects are trademarks of Apple Computer, Inc., registered in the U.S. and other countries. AirPort, Extensions Manager, Finder, iMac, and Power Mac are trademarks of Apple Computer, Inc. Adobe and PostScript are trademarks of Adobe Systems Incorporated. Java and all Java-based trademarks and logos are trademarks or registered trademarks of Sun Microsystems, Inc. in the U.S. and other countries. Netscape Navigator is a trademark of Netscape Communications Corporation. RealAudio is a trademark of Progressive Networks, Inc. © 1995–2001 The Apache Group. All rights reserved. UNIX is a registered trademark in the United States and other countries, licensed exclusively through X/Open Company, Ltd. 062-9285/7-26-02 LL9285.Book Page 3 Tuesday, June 25, 2002 3:59 PM Contents Preface How to Use This Guide 39 What’s Included
    [Show full text]
  • Learn Yosemite OS X from PCM's Apple Experts
    Learn Yosemite OS X from PCM’s Apple Experts Yosemite 101: OS X Support Essentials Give PCM the opportunity to train your team to support users of Apple’s Mac OS X Yosemite. Our Apple certified trainers are ready to come to your location and provide PCM’s Apple certified trainers will teach your team Yosemite OS X fundamentals and how to be efficient with you with invaluable Yosemite tools and resources. hands-on instruction. OS X Yosemite Support Essentials is a three-day, Who Should Attend hands-on course that provides an in-depth explo- • Help desk specialists, technical coordinators, ration of troubleshooting on Mac OS X v10.10 Yo- service technicians, and others who support semite. This course is designed to give you a tour Mac users. of the breadth of functionality of Mac OS X v10.10 • Technical support personnel in businesses that Yosemite and the best methods for effectively use Macs. supporting users of Mac OS X v10.10 Yosemite • Technical coordinators or power users who systems. The course is a combination of lectures manage networks of computers running and hands-on case study exercises that provide Mac OS X — such as teachers and technology practical real-world experience. specialists who manage networks or computer labs. At your location For a class at your location, PCM will provide an What You Will Learn Apple Certified Trainer, all the student materials, • The troubleshooting process and how to and an exam voucher for each attendee (up to become more efficient with available tools 6 students included in price).
    [Show full text]
  • Apple Has Built a Solution Into Every Mac
    Overview Mac OS X iPhone iPod + iTunes Resources Vision Mac OS X solutions VoiceOver from third parties. Browse the wide variety of To make it easier for the blind and those with low-vision to use a accessibility solutions supported computer, Apple has built a solution into every Mac. Called VoiceOver, by Mac OS X. Learn more it’s reliable, simple to learn, and enjoyable to use. In Depth Device Support Application Support Downloads VoiceOver Application Support VoiceOver. A unique solution for the vision-impaired. Every new Mac comes with Mac OS X and VoiceOver installed and includes a variety of accessible More than 50 reasons to use applications. You can also purchase additional Apple and third-party applications to use with VoiceOver. VoiceOver. Learn more While this page lists a few of the most popular applications, many more are available. If you use an application with VoiceOver that’s not on this list, and you would like to have it added, send email to [email protected]. Unlike traditional screen readers, VoiceOver is integrated into the operating system, so you can start using new accessible applications right away. You don’t need to buy an update to VoiceOver, install a new copy, or add the application to a “white list.” Moreover, VoiceOver commands work the same way in every application, so once you learn how to use them, you’ll be able to apply what you know to any accessible application. Apple provides developers with a Cocoa framework that contains common, reusable application components (such as menus, text fields, buttons, and sliders), so developers don’t have to re-create these elements each time they write a new application.
    [Show full text]
  • Enterprise Best Practices for Ios Devices On
    White Paper Enterprise Best Practices for iOS devices and Mac computers on Cisco Wireless LAN Updated: January 2018 © 2018 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 1 of 51 Contents SCOPE .............................................................................................................................................. 4 BACKGROUND .................................................................................................................................. 4 WIRELESS LAN CONSIDERATIONS .................................................................................................... 5 RF Design Guidelines for iOS devices and Mac computers on Cisco WLAN ........................................................ 5 RF Design Recommendations for iOS devices and Mac computers on Cisco WLAN ........................................... 6 Wi-Fi Channel Coverage .................................................................................................................................. 7 ClientLink Beamforming ................................................................................................................................ 10 Wi-Fi Channel Bandwidth ............................................................................................................................. 10 Data Rates .................................................................................................................................................... 12 802.1X/EAP Authentication ..........................................................................................................................
    [Show full text]
  • Implementing Keychain Management
    Implementing Keychain Management This module describes how to implement keychain management on. Keychain management is a common method of authentication to configure shared secrets on all entities that exchange secrets such as keys, before establishing trust with each other. Routing protocols and network management applications on Cisco IOS XR software often use authentication to enhance security while communicating with peers. Feature History for Implementing Keychain Management Release Modification Release 3.3.0 This feature was introduced. Release 3.4.0 • Support for the MAC authentication algorithm was added. • Support for hitless key rollover and key acceptance tolerance were added. Release 3.5.0 Support for hitless key rollover for Open Shortest Path First (OSPF) and Intermediate System-to-Intermediate System (IS-IS) was added. • Prerequisites for Configuring Keychain Management, on page 1 • Restrictions for Implementing Keychain Management, on page 1 • Information About Implementing Keychain Management, on page 2 • How to Implement Keychain Management, on page 2 • Configuration Examples for Implementing Keychain Management, on page 11 • Additional References, on page 12 Prerequisites for Configuring Keychain Management You must be in a user group associated with a task group that includes the proper task IDs. The command reference guides include the task IDs required for each command. If you suspect user group assignment is preventing you from using a command, contact your AAA administrator for assistance. Restrictions for Implementing Keychain Management You must be aware that changing the system clock impacts the validity of the keys in the existing configuration. Implementing Keychain Management 1 Implementing Keychain Management Information About Implementing Keychain Management Information About Implementing Keychain Management The keychain by itself has no relevance; therefore, it must be used by an application that needs to communicate by using the keys (for authentication) with its peers.
    [Show full text]
  • Security Analysis and Decryption of Lion Full Disk Encryption
    Infiltrate the Vault: Security Analysis and Decryption of Lion Full Disk Encryption Omar Choudary Felix Grobert¨ ∗ Joachim Metz ∗ University of Cambridge [email protected] [email protected] [email protected] Abstract 1 Introduction Since the launch of Mac OS X 10.7, also known as Lion, With the launch of Mac OS X 10.7 (Lion), Apple has Apple includes a volume encryption software named introduced a volume encryption mechanism known as FileVault 2 [8] in their operating system. While the pre- FileVault 2. Apple only disclosed marketing aspects of vious version of FileVault (introduced with Mac OS X the closed-source software, e.g. its use of the AES-XTS 10.3) only encrypted the home folder, FileVault 2 can en- tweakable encryption, but a publicly available security crypt the entire volume containing the operating system evaluation and detailed description was unavailable until (this is commonly referred to as full disk encryption). now. This has two major implications: first, there is now a new functional layer between the encrypted volume and We have performed an extensive analysis of the original file system (typically a version of HFS Plus). FileVault 2 and we have been able to find all the This new functional layer is actually a full volume man- algorithms and parameters needed to successfully read ager which Apple called CoreStorage [10] Although this an encrypted volume. This allows us to perform forensic full volume manager could be used for more than volume investigations on encrypted volumes using our own encryption (e.g. mirroring, snapshots or online storage tools.
    [Show full text]
  • Macos at CCSU – What’S New?
    MacOS at CCSU – What’s New? MacOS is faster, more secure, and has several new features: 1. Jamf Computer Management and Self-Service Software Installations 2. Encryption and VPN for Laptops 3. Password Reset Procedures and Synchronization with NOMAD 4. Automatic Weekly Maintenance 5. Music, Video, Podcast and Safari Updates Jamf Computer Management & Self-Service Software Installations Jamf is a tool that allows the IT department to manage policies, updates and software on Mac computers. It allows us to keep the software on your computer updated to protect against security threats. Jamf also allows us to set policies to keep your account and computer safe, such as auto locking your computer after 15 minutes of inactivity. In addition, Jamf provides a Self-Service Software Installation tool that allows you to install CCSU-licensed software on your computer when needed. To access Self-Service, click on the icon in the Dock. If you do not see the icon, then open it from the Applications folder. To install an application from Self-Service, simply click on the Install button. Applications available to install include Adobe Creative Cloud, Chrome, Jabber, Webex, SPSS, Firefox, and more. MacOS Laptops If you use a MacBook Pro as your primary CCSU-issued computer, there are some added features: VPN (Virtual Private Network) The VPN connects your MacBook Drive Encryption to the campus network even when off campus. The connection to the The hard drive of your laptop is encrypted for campus network allows direct added security. Encryption uses your BlueNet access to resources such as Secure account as the credentials, so it is important to Apps (secureapps.ccsu.edu) for review the information on Page 2 to ensure the access to Banner, WebNow, encryption password stays synchronized.
    [Show full text]
  • BLACKLIGHT 2020 R1 Release Notes
    BlackLight 2020 R1 Release Notes April 20, 2020 Thank you for using BlackBag Technologies products. The Release Notes for this version include important information about new features and improvements made to BlackLight. In addition, this document contains known limitations, supported versions, and updated system requirements. While this information is complete at time of release, it is subject to change without notice and is provided for informational purposes only. Summary To enhance our forensic analysis tool, BlackLight 2020 R1 includes: • Apple Keychain Processing • Processing iCloud Productions obtained via search warrants from Apple • Additional processing of Spotlight Artifacts • Updated Recent Items parsing for macOS In Actionable Intel • Parsing AirDrop Artifacts • Updates to information parsed for macOS systems in Extended Information • Added support for log file parsing from logical evidence files or folders • Support added for Volexity Surge Memory images • Email loading process improved for faster load times • Support added for extended attributes in logical evidence files • Newly parsed items added to Smart Index (Keychain, Spotlight, and AirDrop) NEW FEATURES Apple Keychain Processing Keychains are encrypted containers built into macOS and iOS. Keychains store passwords and account information so users do not have to type in usernames and passwords. Form autofill information and secure notes can also be stored in keychains. In macOS a System keychain, accessible by all users, stores AirPort (WiFi) and Time Machine passwords. The System keychain does not require a password to open. Each user account has its own login keychain. By default, each user’s login keychain is opened with the user’s login password. While users can change this, most users do not.
    [Show full text]
  • The Apple Ecosystem
    APPENDIX A The Apple Ecosystem There are a lot of applications used to manage Apple devices in one way or another. Additionally, here’s a list of tools, sorted alphabetically per category in order to remain vendor agnostic. Antivirus Solutions for scanning Macs for viruses and other malware. • AVG: Basic antivirus and spyware detection and remediation. • Avast: Centralized antivirus with a cloud console for tracking incidents and device status. • Avira: Antivirus and a browser extension. Avira Connect allows you to view device status online. • BitDefender: Antivirus and malware managed from a central console. • CarbonBlack: Antivirus and Application Control. • Cylance: Ransomware, advanced threats, fileless malware, and malicious documents in addition to standard antivirus. • Kaspersky: Antivirus with a centralized cloud dashboard to track device status. © Charles Edge and Rich Trouton 2020 707 C. Edge and R. Trouton, Apple Device Management, https://doi.org/10.1007/978-1-4842-5388-5 APPENDIX A THe AppLe ECOSYSteM • Malware Bytes: Antivirus and malware managed from a central console. • McAfee Endpoint Security: Antivirus and advanced threat management with a centralized server to track devices. • Sophos: Antivirus and malware managed from a central console. • Symantec Mobile Device Management: Antivirus and malware managed from a central console. • Trend Micro Endpoint Security: Application whitelisting, antivirus, and ransomware protection in a centralized console. • Wandera: Malicious hot-spot monitoring, jailbreak detection, web gateway for mobile threat detection that integrates with common MDM solutions. Automation Tools Scripty tools used to automate management on the Mac • AutoCasperNBI: Automates the creation of NetBoot Images (read: NBI’s) for use with Casper Imaging. • AutoDMG: Takes a macOS installer (10.10 or newer) and builds a system image suitable for deployment with Imagr, DeployStudio, LANrev, Jamf Pro, and other asr or Apple Systems Restore-based imaging tools.
    [Show full text]
  • Mac OS X Server in Education Collaboration and Communication Solutions for 21St-Century Academic Environments
    Mac OS X Server in Education Collaboration and communication solutions for 21st-century academic environments. Podcasts. Blogs. Wikis. Group calendars. Video chats. Instant access to centralized resources. Welcome to the 21st-century academic environment. With Mac OS X Server version 10.5 Leopard, Apple puts the power of a server into the hands of everyone in your institution. So students, educators, and researchers are always connected and always communicating and collaborating—whether they’re around the globe or just across campus. 10 Reasons for Mac OS X Server in Education 1. End-to-end production of professional-quality podcasts. Podcast Producer in Mac OS X Server is a complete, customizable solution for producing podcasts of lectures, development sessions, research presentations, and campus updates. Starting with the Podcast Capture application in Mac OS X Leopard, it’s a snap for users to capture audio and video, record onscreen actions, or submit existing QuickTime content to the server. Once the content is uploaded, Podcast Producer automatically publishes it to your choice of distribution services—including iTunes U—in formats optimized for playback on almost any device, from HD video to iPod, Apple TV, or any multimedia-enabled cell phone. 2. Group collaboration on wiki-powered websites. Mac OS X Server gives students, educators, and research teams an instant space for collaboration. With their own group wiki—complete with blog, group calendar, and mailing-list archive—authorized users can create entries, tag and cross-reference material, upload files and images, add comments, and perform keyword searches. Best of all, these powerful capabilities are accessible from any modern browser in just a few clicks—there’s no need to learn an arcane markup language.
    [Show full text]
  • Filevault, Choose an Unlock Method, and Set a • Create a Recovery Key
    Overview Power and Mac State 8. Choose how to unlock your disk and reset Encryption occurs only while plugged into a your login password if you forget it. If your Mac is eligible, you just need to enable power source and in the Awake Status. • Use your iCloud account OR FileVault, choose an unlock method, and set a • Create a recovery key. Write down the few other options. Once enabled, files are Prevent Your Mac From Sleeping recovery key, or take a photo with your encrypted as they are added. 1. Go to the Apple menu. phone (be sure your phone is set up to 2. Select System Preferences. use a passcode to unlock), and keep it in Macs that are managed by WashU IT 3. Select Energy Saver. a safe place. are encrypted. If you need access to 4. Select the Power Adapter tab and your FileVault key, please contact the then slide the timer to Never. Don’t WashU IT Help Desk. forget to reset it when you are done encrypting. Requirements to Use FileVault Enabling FileVault 9. Select Continue. 10. If your Mac has multiple users, each Correct Mac OS Version If you meet the requirements in 1, 2, and 3, account that needs login access will need to OS X 10.7 Lion or newer and your mac is plugged into a power source, be enabled. You will need to know the follow the steps below. associated password for each account, or Check Your OS Version 1. Go to the Apple menu. have the user enter it during this process.
    [Show full text]