The Hoopla around the "Widespread" Mac Trojan

So a "new" (no it's not new) Mac Flashback Trojan is the talk of the town in tech media circles right now. 600K may be infected, which tells me that there are approximately 600K Mac owners out there who need some BASIC instruction on avoiding malware (the same folks who've infected their PCs for years because they're clueless).

For what it's worth, I ran the terminal commands to check my machine and…as I believed…it's clean. The reason is that I don't install software on my machine from just anywhere. If I want to install Flash, I go to Adobe's site myself. I NEVER rely on another's hyperlink (heck, I even know how to check the hyperlink…just hover your cursor over it for a second). You wouldn't do this to go to your bank account from an email, would you? Then why do it anywhere else for ANY reason.

Social engineering is the tool these malicious developers use most often, so do yourself a favor: learn how to avoid being duped in the first place.

The malware in question is a trojan horse called Flashback (OSX/flashback.A); users may end up acquiring it by clicking a link on a malicious website to download or install Flash player. If those users also have their Safari settings to automatically open safe files (which .pkg and .mkpg files are considered to be), an installer will show up on their desktops as if they are legitimately installing Flash.

[From Mac trojan pretends to be Flash Player Installer to get in the door]

HIUTIL Using 90+% CPU

You may run into this issue after upgrading to Lion or after doing some system maintenance that deletes the Help system files (same thing with Spotlight which is managed by mdworker). If that happens, just let it run until it's finished.

HIUTIL and MDWORKER CPU. Immediately after installing Lion, and over a period of a few hours, the hdutil and mdworker processes will be using up 90% to 100% of your CPU making the computer very slow. These tasks are used to update the Spotlight index and help file index. So, it’s best to wait until these programs have completed their tasks before continuing to work on the computer.

[From Apple OS X 10.7 Lion Installation Guide and Usage Tips – Including How to Create a Bootable DVD or USB Drive | ResourcesForLife.com]

Apple Store's Customer Service A-Okay

Although I occasionally rant on here about some of Apple's inexplicable actions, you can see that I don't give up on Apple or their products. Quite frankly, they're second to none, even with the occasional tendency of Apple to avoid admitting fault at all costs. Well, I'm going to sing their praises right now.

My shiny, new iPhone 4S developed a short or glitch in the audio output of the Dock Connector. Everything else would work--charging, data. Just garbled or mono audio. So I made an appointment at the MacArthur Center Apple Store in Norfolk, VA. They were prompt, helpful, and friendly. Above all, they immediately REPLACED my iPhone with a brand new one at zero cost. Problem solved. So, in some respects, their customer service is second to none, especially at the local level. Way to go Apple. Thanks for taking care of me!

iPhoto No Longer Recognizing iPhone?

If you moved to iOS 5 on your iPhone and downloaded the latest version of iPhoto (that allows for Photo Stream using iCloud), you may have noticed that your iPhone is no longer recognized by iPhoto when you physically plug it into a Mac running Lion. iOS 5 brought all sorts of new features, including WiFi sync and automatic download of your phone's new photos over the last 30 days using Photo Stream (part of iCloud). But with that power comes the inevitable hiccups.

These new features and conveniences can create a problem if you had old photos hanging around on your iPhone that hadn't been transferred to iPhoto.

You might think, "Big deal, I'll just use the wang-bang new iCloud to transfer my old photos." Nope. Only new ones. What I did to fix this was to follow some of the information in the troubleshooting link below. The primary fix for me was unplugging and replugging the docking station from my Mac Pro. That seemed to fix it and now my iPhone is recognized by iPhoto, even with Photo Stream and WiFi syncing enabled. Time will tell, but always open up Image Capture to see if your computer is recognizing your iPhone's physical connection (via USB).

Try using the photo-management software built in to your computer's operating system:

Mac OS X: Open Image Capture (located in the Applications folder).

[From iOS: Unable to import photos or device not recognized as a camera]

Lion-to-Lion File Sharing Troubles: Fix!

After upgrading our machines at home to Lion, I discovered that AFP file sharing no longer functioned. I would get various errors when trying to connect from one machine to another. The errors were things like "too many users connected." Well, after much research (apparently there are many problems with Lion's implementation of AFP and SMB), I found that deleting the preference file referenced below and rebooting fixed my file sharing issues.

I had what seems to be the same problem, and I think I solved it: In /Library/Preferences/com.apple.AppleFileServer.plist there were two keys, maxConnections and maxGuests, that were set to 0. Looked like this:

maxConnections 0
maxGuests 0

I changed the values to 10, and it seems to be working now.

[From Unable to share files with other Macs...: Apple Support Communities]

OS X Lion: Syncing Contacts with iPhone

I guess you're thinking that this will be another commentary on OS X Lion's really ugly, new Address Book interface (along the lines of Lion's equally ugly, new iCal interface). No, it won't be that, although I am among those who don't like the change to the faux leather look (a GUI design idea that went stale about 10 years ago).

I'm talking about the Address Book's internal changes that costed me HOURS of work to get things functioning normally again…specifically, syncing information to my iPhone.

Here's the story: I thought I would be smart about my Lion upgrade. First, I waited until version 10.7.1 to go for it. Then, I ordered a brand new 1TB hard drive to install in my Mac Pro. I used Onyx to really clean up my Snow Leopard install, and then I proceeded to use Carbon Copy Cloner to clone my SL drive to the new 1 TB drive. Now I was ready to upgrade that new drive to Lion, keeping my original SL drive as a backup. Smart, huh? But Apple would get the last laugh.

I upgraded as described and everything seemed great! I love Lion's new zippiness and several of the features (though Launchpad is fairly useless for me). Then, I plugged my iPhone 3GS into the dock and synced normally with iTunes. A first glance and everything seemed fine. Wrong! I received a text message from my wife and noticed that it had her number listed instead of her name. What was this? I looked through my Contacts on the iPhone and noticed that NO CONTACTS HAD PHONE NUMBERS!!! All the other information was there: addresses, emails, notes. Just not the most important bit needed in a phone--the damn phone numbers!!!! A glance through the Address Book on the Mac showed that all the phone numbers were still there. They just wouldn't sync.

I tried all the usual troubleshooting stuff, to no avail. Realizing that my issue had something to do with syncing, I followed Apple's own guidance for advanced syncing issues. All of these steps did not help, initially, because they failed to take into account the iPhone itself. I also tried iTunes and replacing all the contacts on the iPhone, which also did not fix the issue…still no numbers. I even posted on Apple's community web site for help and got no takers. So, I went back to Apple's advanced syncing troubleshooting article and went about it from a different angle. As I touched on earlier, they never really brought the phone into the discussion much, other than saying sync normally after the troubleshooting steps.

Thinking I had an epiphany, I toyed with Address Book preferences--specifically the phone number format (which is a bit buggy at the moment); that was also ineffective. So, I decided to backup my Address Book into an archive, copy a vCard for all my contacts and groups, and then delete everything to do with Address Book from my Mac except the application--just as the article describes (remove caches, Application Support folder, and preferences). The difference is that--after doing all those steps--I also synced the phone and made sure that all my contacts were deleted from the Contacts app. I now had a virgin Address Book and a virgin Contacts app on the iPhone. From here, I reimported my contacts using the vCard into Address Book. Apple's instructions for recreating groups did NOT work; maybe it worked before Lion, but not now (this was really frustrating…trying to easily recreate groups as they described resulted in a huge amount of wasted effort, with groups that appeared reconstituted but with contacts that disappeared after restarting Address Book). So, I had to manually recreate my groups, which took HOURS (as I said). I used Quick Look to help me do this; highlighting a vCard in the Finder and pressing spacebar gives you a look at all the contacts inside each group. Then it's just a matter of searching for them in Address Book and then adding them to the recreated group. A huge waste of time!

I also need to add that I used my Address Book with Dropbox, but moving my Application Support folder back to the Library did not fix the issue either. Dropbox was not the culprit.

I imagine it's related to the coming iCloud and the changes required for syncing to that medium, but who knows. Ironic that the most important bit of information on a phone--the numbers--were omitted from the syncing process, leaving me with an essentially useless phone.

How-to: Read and Write NTFS Windows Partition on Mac OS X

If you're like me (forced to use Wind-bloze at work while using all Macs at home), you may need this to transfer files back and forth using NTFS (not this f*cking sh*t) drives. Modern Macs can read pure NTFS volumes but can't write to them.

Recently Amit Singh, a Google employee, releases a implementation called MacFUSE which makes it possible to use any FUSE (File-system in USErspace) file systems in Mac. And the most useful FUSE is the NTFS-3G Read/Write Driver, which ables system to load NTFS with read and write capability. This is truly the greatest news for dual booting Mac OS X and Windows XP or Vista.

[From How-to: Read and Write NTFS Windows Partition on Mac OS X]

10.6.7 -> Trouble with AddressBookSync

I'm not talking about the little applications you can download to sync up Facebook friend profile pictures with your AddressBook database. I'm talking about an app hidden in the Resources of the System Framework that's used to sync contacts between various devices, including the iPhone. Mine inexplicably went nuts recently and was crashing like crazy with every iPhone sync attempt. A Google search yielded practically nothing, so I knew I had a unique problem. I tried all the typical troubleshooting steps to no avail, including a deletion of preference files. So, here's what finally fixed it:

I used Pacifist to copy the System Framework called AddressBook onto my desktop from the 10.6.7 Combo Updater. I deleted the original in the /System/Frameworks/ folder and replaced with this one. I noticed that the AddressBookSync app was smaller in the Updater, so something obviously went wrong in the update process. After copying the new Framework into the proper location from my desktop, I repaired permissions and voila...no more crashes.

Be Smart with Smart Folders

Most of us don't use OS X to its fullest potential. Here are some great tips for getting the most out of Smart Folders. I have several of these set up, including for System File searches, PDFs, and Preferences. It's kind of like a searching shortcut.

Want to keep track of all documents you have greater than 500MB in size? All your PDFs? All your OpenType fonts? Pictures taken with your Canon PowerShot within the last two weeks that have less than a specified focal length and greater than a specified exposure time? If you can set up a search for something in the Finder, you can make a smart folder for it too.

[From Smart ways to work with smart folders | Business Center | Working Mac | Macworld]

Orwellian Apple Censorship

Here's my comment on the story about Apple censoring its Discussion Boards over Consumer Reports refusal to recommend the new iPhone 4 based on reception issues. Part of the reason for this blog is document my own troubleshooting efforts and problems I've had with Apple hardware and software.

Apple discussion boards have done this for years. They have devoted stormtroopers on there who will edit or delete your posts in a flat second, if they deem the posts unflattering to their products.

What’s unfortunate is that I’ve had several negative things to write in those forums, usually about hardware. My Powerbook’s lower memory slot went out and I never got it fixed because mine wasn’t in the “range of serials” that Apple deemed to be the problem; no one told my Powerbook that. My current Airport Extreme has to be reset usually once each day…again, Apple’s response to me is to make an appointment and bring it in to the Genius Bar (not sure how they are going to replicate my issue there, since it’s random). If you Google it, however, you’ll see that it’s a common problem, and people get inconsistent help (some get products replaced straightaway while others don’t).

Same sort of censoring happened when Apple decided to remove pdf manuals and hardcopy manuals from Logic Studio and replace them with the cumbersome Apple Help system. Apple finally relented and quietly brought back the pdf files after all the complaints. But they never acknowledged the complaints.

I think Apple would do well to have a revamped hardware testing division: A group of folks to test a product for six months thoroughly, before Apple releases it. They’ve always relied on users and developers to QC their software just before and right after release, but it’s a mistake to use that model on hardware. There are certain things in hardware that simply can’t be fixed after the genie is out of the bottle. I’m afraid what happens is that users end up being guinea pigs for the hardware a lot of the time; Apple simply (quietly) fixes the issues discovered in the next iteration, but the original buyers are left out in the cold.

[From Apple Censoring Discussion Forums Ref. Consumer Reports | Cult of Mac]

Airport Extreme Freezes and Connection Slowness

Not even a year ago, we replaced our old Netgear Ethernet Router and old Airport Express with a nice, shiny, new Apple Airport Extreme. Lot's o' promise. The main problem (apart from other minor hiccups you'll find on here) has been that we typically have had to soft reset the unit daily, because the connection would become completely unresponsive--including Ethernet and wireless connections. So, it was either the cable modem (which worked fine with our old router) or the Airport Extreme, which judging from a Google search is giving more users than just me fits. So, I've played with all sorts of settings, including turning off IPv6 in the unit and on all the computers in the house; that didn't seem to fix anything.

However, I may have just made some changes that greatly improved my download speed while also eliminating the need to reset the AEBS each day! We'll see if my "fix" holds up. But the speed improvement is a plus.

First, I changed from "Automatic" to 100 Mbps/Full Duplex in the Airport Utility and restarted the AEBS:

Next, I changed similar settings in System Preferences->Network ("Automatic" to "Manually"):

Speeds via speedtest.net showed a dramatic improvement for download:

Then, I finally found the culprit: The automatic MTU!!
I couldn't believe it. Such a stupid, basic cause of such a big problem. This is most certainly a BUG.

To fix the MTU:

1. Apple Menu > System Preferences... then Network.

2. On the left, choose Ethernet , then Advanced... on the bottom.

3. Choose Ethernet tab:
. . . Configure: Change from Automatically to MANUALLY.
. . . MTU: Change from Standard to CUSTOM. Put 1452 then click OK. Then Apply at the bottom.

[From Apple - Support - Discussions - A fix for random, slow, intermittent ...]

1Password Slow Safari Starts and Command Key Sluggishness

I've had these issues for sometime now. Turns out that I may have discovered something crucial about the problems. Rebuilding the datafile, clearing the cache, and removing all InputManagers did not fix the issues, which were reproducible on two Macs. Removing the Internet plugins also did not resolve the issues.

If Safari is starting slow for you under Snow Leopard and you use 1Password 3, make certain that you remove the old InputManager called something like "1Passwd." I was able to start Safari far faster than before. Until Agile fixes the command key sluggishness issue, make sure you lock your keychain after you're done using it. It's a pain in the ass, but your browsing snappiness will return if you like to use key commands like me.

::UPDATE::

Another discovery (apart from the one listed below) can be read here. Turns out that it's the "key icon" in the Safari menubar that's somehow contributing to the command key slowness in Safari. If I disable that in 1Password's preferences, the sluggishness disappears, even with the keychain unlocked. No clue, but that's somehow the culprit. Maybe it will help others. Please let me know here if you're able to reproduce this problem.

First, I can verify that removing the old InputManager left over from the 1PW 2.x days definitely made Safari (ver. 5) start up faster (2 - 3 icon bounces in the Dock instead of about 10). Start up is almost instantaneous now, thank goodness.

Second, this command-key sluggishness (and even clicking the 1P or key icons) I've been going through has persisted (any Command key combination is slow on Safari 4 and 5). This means sluggish behavior for key combinations like Cmd-T to make a new tab, Cmd-W to close a tab, or even Cmd-Q to quit Safari. Very LONG pauses before the desired result follows the keystroke combination.

However, I made a discovery today that I wanted to pass along to you all at Agile, which may or may not help troubleshoot this issue. It's reproducible on my Mac Pro and my MacBook. The sluggishness ONLY occurs while 1PW is unlocked. As soon as I LOCK 1PW again, the snappiness of my command keys in Safari 5 returns!!! Unlock the keychain, back to sluggishness. Completely reproducible on both my machines.

I have rebuilt the data file and cleared caches several times. The only other InputManagers I still have running are DeliciousSafari and the latest beta of Glims (if that's even still an InputManager).

Any advice you can provide would be greatly appreciated.

[From Slow Safari startup with 1Password enabled (when the Cache is out of date)]

Use Only One Partition for AirPort Extreme (802.11n) Disks

Turns out that using more than one volume per disk connected to an Airport Extreme isn't a good idea. May explain some of my issues.

The AirPort Extreme (802.11n) and Time Capsule work with most disks that are not software RAID volumes (no more than one volume per physical disk).

[From AirPort Extreme (802.11n) and Time Capsule: USB storage device supported formats and protocols]

Ecto Finally Updated to 3.0.2

Seems like every time I buy software, I get screwed. The developer stops developing the software, or the developer gets bought out by a bigger company (who ignores the software), or both. At any rate, I had nearly given up on Ecto...my favorite blogging software (which was chock full of bugs). Still not much better than Ecto out there, so I'm glad they've finally paid it some attention.

ecto 3.0.2 was released today via the built in software updater. The ecto 3.0.2 release includes the following fixes:

updated Amazon plugin
updated Flickr plugin
include Atom03 plugin by default (mostly for older Japanese blog systems)
fixed a URL redirect handling bug
minor documentation updates (link to correct location for support forum, etc.)
the ecto updater now uses a different XML feed to update the software based on the operating system version, separating Mac OS X 10.4 (Tiger) from later versions, (Leopard and higher)

[From illumineX: ecto 3.0.2 released]

mDNSResponder Constantly Doing "Something"

I noticed my mDNSResponder connecting constantly to opendns (didn't always happen but when it did it was constant). Found the links below. It basically requires a bit of under-the-hood tweaking.

1. Make a back up copy of the mDNSResponder.plist file as a precaution.
2. Open the mDNSResponder.plist file in Terminal using your preferred text editor. Here is a sample command:
   

   sudo nano "/System/Library/LaunchDaemons/com.apple.mDNSResponder.plist" 
   

3. Add "<string>-NoMulticastAdvertisements</string>" to the array in the "ProgramArguments" section.
   
   In other words:
   

     <key>ProgramArguments</key>
           <array>
               <string>/usr/sbin/mDNSResponder</string>
               <string>-launchd</string>
           </array>    
   

   becomes...
   

           <key>ProgramArguments</key>
           <array>
               <string>/usr/sbin/mDNSResponder</string>
               <string>-launchd</string>
          <string>-NoMulticastAdvertisements</string>
     </array>
   

4. Save the file.
   
   Important: If you edited the file using emacs, you must remove the emacs backup file (the file with a tilde at the end of the name, "/System/Library/LaunchDaemons/com.apple.mDNSResponder.plist~") or your Mac will not start up.
   
5. Restart your Mac.

****

UPDATE 12 June 2010: The problem, as it turns out, was listing my OpenDNS servers in both my Airport Extreme (for the entire home network) and my Mac Pro. As soon as I deleted the OpenDNS servers from Network Preferences on my Mac Pro, everything returned to normal...no more constant outgoing connections. The above method worked too, but it was at the cost of losing Bonjour connectivity on my home network (not acceptable).

[From Snow Leopard disabling mDNSResponder/Bonjour drops internet - Mac Forums]

Mac OS X v10.6 uses the mDNSResponder process for unicast DNS (Domain Name System) functions, as well as Bonjour functions. Disabling the mDNSResponder process will also disable unicast DNS resolution, and without unicast DNS resolution, Mac OS X v10.6 cannot resolve hostnames such as www.apple.com.

In some network environments, administrators may prefer that Mac OS X v10.6 not transmit Bonjour service advertisements. You can use this advanced article if you are a network administrator who needs to disable Bonjour advertising service without disabling Bonjour queries and DNS.

[From Mac OS X v10.6: Disabling mDNSResponder will disable DNS]

Adobe Blocking HTML5 To Save Flash

What do you do when you're a major software company with a huge investment in a buggy, cumbersome technology (that's expensive for users to implement and maintain) that's being directly threatened by a better, lighter-weight technology that's open-source (and thus free)? You act like Microsoft, of course.

Long live HTML5 and down with Flash!!! I truly believe the iPhone and iPad will drive the eventual adoption of HTML5 that will supplant Flash. The sooner it happens the better for us all.

Larry Masinter, Adobe, quoted in the minutes of yesterday's weekly phone status report for the HTML working group: do I need to repeat objections?

Net result: the latest publication of HTML5 is now blocked by Adobe, via an objection that has still not been made public (despite yesterday's promise to make it so).

[From Hixie's Natural Log: Consistency]

Photo Editing Noobs: Use Layers

And you don't need Photoshop to use Layers. Just download the free, open-source GIMP editor and enjoy! GIMP can do most everything that Photoshop can and it doesn't cost you a dime.

Do you edit your digital photos using layers? If not, you're missing out on the single most powerful tool in your photo editing repertoire. Layers may seem baffling at first, but they're not hard to use—and they permit all sorts of powerful digital editing tricks.

You can use layers to combine photos, create double exposures, achieve special effects like selective color in a partly black-and-white image, and even correct a shot's exposure or color balance.

[From Basic photo editing tricks with layers | Digital Photo | Digital Photo | Macworld]

1Password KeyChain Syncing Issue With Dropbox

Here was my solution when I discovered resent changes to my keychain weren't being updated:

I was having difficulty with my agilekeychain not syncing the latest data changes. It's not a problem with Dropbox. Open 1Password>Preferences>Advanced and then Clear Cache. Uncheck using cache to prevent this from happening again (or simply remember to clear the cache).

[From 1password AgileKeyChain is not syncing « Dropbox Forums]

Make Web Clips in Safari for Dashboard

Here's a neat little trick that I haven't used much!

Leopard makes it easy to create a Dashboard widget from a segment of a web page. For example, you can capture a “new releases” list from a media website, or the “latest posts” field from an Internet discussion group. These Web Clips appear, automatically updated, whenever you open Dashboard.

[From Apple - Pro - Tips - Creating Web Clip Widgets]

Avoid Special Keys in Screen Sharing

Open Terminal and type:

defaults write com.apple.ScreenSharing DoNotSendSystemKeys -bool YES

To restore the old behavior, change the last word to "NO." You can also use a plist editor if you're scared of the Terminal.

If you prefer the 10.5 behavior, wherein special keys are never sent to the remote Mac, there is a solution. It requires Terminal (in Applications -> Utilities), but only for one command. Launch Terminal, then copy and paste the following line (while Screen Sharing is not active):

[From Don't send special keys in 10.6's Screen Sharing | Mac OS X | Mac OS X Hints | Macworld]