Mac Admins Podcast

iOS 16 was released on September 12 and Ventura on October 24. We all went through the rollercoaster of the post-WWDC Betas, but how have they both fared out there in the wildlands of prod? What features do we love and which still need a little work? In this episode, Tom, Marcus, and Charles chat Ventura, iOS 16, and even a little about Tom’s awesome holiday sweater!

• Tom Bridge - @tbridge777
• Marcus Ransom - @marcusransom
• Charles Edge - @cedge318

Transcript:

Transcription of this episode brought to you by Meter.com

Click here to read the transcript

Sponsors:

• Kandji
• Mosyle
• Watchman Monitoring

If you're interested in sponsoring the Mac Admins Podcast, please email [email protected] for more information.

Get the latest about the Mac Admins Podcast, follow us on Twitter! We're @MacAdmPodcast!

The Mac Admins Podcast has launched a Patreon Campaign! Our named patrons this month include Weldon Dodd, Damien Barrett, Justin Holt, Chad Swarthout, William Smith, Stephen Weinstein, Seb Nash, Dan McLaughlin, Joe Sfarra, Nate Cinal, Jon Brown, Dan Barker, Tim Perfitt, Ashley MacKinlay, Tobias Linder Philippe Daoust, AJ Potrebka, Adam Burg, & Hamlin Krewson

Once upon a time we claimed the Mac couldn’t get a virus. Now we know the folly of our ways. There is a red ocean of endpoint protection solutions for the platform today, but we’re curious to better understand the requirements and the benefits. Crowdstrike Falcon is one of those tools and we’ve asked Bilal Habib to join us for this episode to discuss what it is, how it does it, and what are some things an admin needs to know. But we want to tell that story as a journey for how someone in the trenches actually got to know the things!

• Tom Bridge - @tbridge777
• Charles Edge - @cedge318
• Marcus Ransom - @marcusransom

Guests:

• Bilal Habib - LinkedIn

Transcript:

Transcription of this episode brought to you by Meter.com

Click here to read the transcript

Links:

• Crowdstrike Products: Endpoint, Cloud & Identity Protection Products | CrowdStrike 
• Downloading Crowdstrike for Fun and Profit, from Richard Purves: Downloading Crowdstrike via API for Fun and Profit – Richard Purves
• Bundle IDs for Crowdstrike: Crowdstrike Falcon Sensor v6.11+ Big Sur and M1 De... - Jamf Nation Community
• Source Code for Elk Cloner for the 6502 (from the guy that wrote it)

Sponsors:

• Kandji
• Black Glove
• Mosyle
• Watchman Monitoring

If you're interested in sponsoring the Mac Admins Podcast, please email [email protected] for more information.

Get the latest about the Mac Admins Podcast, follow us on Twitter! We're @MacAdmPodcast!

The Mac Admins Podcast has launched a Patreon Campaign! Our named patrons this month include Weldon Dodd, Damien Barrett, Justin Holt, Chad Swarthout, William Smith, Stephen Weinstein, Seb Nash, Dan McLaughlin, Joe Sfarra, Nate Cinal, Jon Brown, Dan Barker, Tim Perfitt, Ashley MacKinlay, Tobias Linder Philippe Daoust, AJ Potrebka, Adam Burg, & Hamlin Krewson

One of the biggest challenges of the era is how to securely sign people on to work devices from anywhere in the world. Apple has had Kerberos and Active Directory support for some time. They have also recently released frameworks and APIs for modern identity support and payloads for MDM for ExtensibleSingleSignOn. Today we’re going to cover the SSOE with the Product Manager at Microsoft for Azure AD, to see what we can do today - and how we factor this into our plans for the future.

• Tom Bridge - @tbridge777
• Charles Edge - @cedge318
• Marcus Ransom - @marcusransom

Guests:

• Michael Epping - @mepples21

Transcript:

Transcription of this episode brought to you by Meter.com

Click here to read the transcript

Links:

• ExtensibleSingleSignOn | Apple Developer Documentation
• Microsoft Enterprise SSO plug-in for Apple devices (preview)
• MDOYVR20 - Joel Rennich - Single Sign On for fun and profit
• ASAuthorizationProviderExtensio...

Sponsors:

• Kandji
• Mosyle
• Watchman Monitoring

If you're interested in sponsoring the Mac Admins Podcast, please email [email protected] for more information.

Get the latest about the Mac Admins Podcast, follow us on Twitter! We're @MacAdmPodcast!

The Mac Admins Podcast has launched a Patreon Campaign! Our named patrons this month include Weldon Dodd, Damien Barrett, Justin Holt, Chad Swarthout, William Smith, Stephen Weinstein, Seb Nash, Dan McLaughlin, Joe Sfarra, Nate Cinal, Jon Brown, Dan Barker, Tim Perfitt, Ashley MacKinlay, Tobias Linder Philippe Daoust, AJ Potrebka, Adam Burg, & Hamlin Krewson

Apple continues to get better and better at documenting not only APIs but also the Apple Platform Deployment portal that contains plenty of information on how Apple intends for administrators to centrally manage their devices. In this episode we’ll look at a couple of new ways to peruse the docs as well as some insights about device management that can be had by looking at their change control system. 

• Tom Bridge - @tbridge777
• Charles Edge - @cedge318
• Marcus Ransom - @marcusransom

Transcript:

Transcription of this episode brought to you by Meter.com

Click here to read the transcript

Links:

• The Apple Platform Deployment portal
• The revision history
• Deploy “helper” apps
• Rapid security response documentation
• Carrier eSIM settings
• Using MDM with eSIM
• GDMF
• Apple software lookup service with json definitions
• Deferral settings
• Migration Assistant changes
• Managed Device attestation and ACME
• Where to find Bundle identifiers for native apple apps easily
• Wi-fi specs
• MDM Payload List
• MCX as FileVault payload settings

Sponsors:

• Kandji
• Mosyle
• Watchman Monitoring

If you're interested in sponsoring the Mac Admins Podcast, please email [email protected] for more information.

Get the latest about the Mac Admins Podcast, follow us on Twitter! We're @MacAdmPodcast!

The Mac Admins Podcast has launched a Patreon Campaign! Our named patrons this month include Weldon Dodd, Damien Barrett, Justin Holt, Chad Swarthout, William Smith, Stephen Weinstein, Seb Nash, Dan McLaughlin, Joe Sfarra, Nate Cinal, Jon Brown, Dan Barker, Tim Perfitt, Ashley MacKinlay, Tobias Linder Philippe Daoust, AJ Potrebka, Adam Burg, & Hamlin Krewson

Apple Configurator has been a part of the Apple Admin’s toolkit for some time. Initially built to help admins do more than what was available in iTunes it’s grown over the years to add options for the Mac, aid in supervision, and automate tasks further with the ability to script it. We’ll get caught up with how some of these features are working in today’s episode with Subhi Hashwa!

• Tom Bridge - @tbridge777
• Charles Edge - @cedge318
• Marcus Ransom - @marcusransom

Guests:

• Subhi Hashwa

Transcript:

Transcription of this episode brought to you by Meter.com

Click here to read the transcript

Links:

• Apple Device Management
• IsImagingDead.com
• Create a Package in Apple Business Essentials
• Instant Apple Configurator How-to: Edge, Charles, Houston, TJ
• Apple Configurator & Automator
• cfgutil Man Page
• Marriott Library - Apple Infrastructure | AEiOS (Automated Enterprise iOS)
• BASIC Fun: Computer Games, Puzzles, and Problems Children Can Write

Sponsors:

• Kandji
• Mosyle
• Watchman Monitoring

If you're interested in sponsoring the Mac Admins Podcast, please email [email protected] for more information.

Get the latest about the Mac Admins Podcast, follow us on Twitter! We're @MacAdmPodcast!

The Mac Admins Podcast has launched a Patreon Campaign! Our named patrons this month include Weldon Dodd, Damien Barrett, Justin Holt, Chad Swarthout, William Smith, Stephen Weinstein, Seb Nash, Dan McLaughlin, Joe Sfarra, Nate Cinal, Jon Brown, Dan Barker, Tim Perfitt, Ashley MacKinlay, Tobias Linder Philippe Daoust, AJ Potrebka, Adam Burg, & Hamlin Krewson

We’ve wanted to an episode on 3D printers for a long time but every time we went to book one, one of our printers stopped working for some stupid reason, we got mad, and said nevermind. Yup, it’s still a little bit of a hobbyist market. It feels like the Apple I era in a way but it’s starting to feel more and more like the months leading up to the release of the 1977 Holy Trinity. And our listeners are hackers and we want to demystify this stuff a little for anyone maybe thinking of having Santa deliver one of these for the holidays.

• Charles Edge - @cedge318
• Marcus Ransom - @marcusransom

Guests:

• Trevor Sysock - @BigMacAdmin
• James Smith - @smithjw

Transcript:

Transcription of this episode brought to you by Meter.com

Click here to read the transcript

Links:

• From @xavier https://www.thingiverse.com/thing:3945911
• Designs by Trevor: https://www.thingiverse.com/alchemic/designs
• Designs by Charles: https://www.thingiverse.com/krypted/designs 
• Print with chocolate: https://www.3dprintersonlinestore.com/foodbot-s2-food-3d-printer
• Coconut Printer https://www.amazon.com/Toybox-Printer-Kids-Software-Needed/dp/B07KKLRVMK 
• LiDAR Scanner https://apps.apple.com/us/app/polycam-lidar-3d-scanner/id1532482376 
• https://www.blender.org/ 
• https://pixologic.com/ 
• https://www.ford.com/support/how-tos/owner-resources/vehicle-documents/how-do-i-use-3d-printing-to-customize-my-ford-maverick-pickup/
• Fusion 360 Tutorials: https://productdesignonline.com/fusion-360-tutorials/create-a-beer-bottle-in-fusion-360/
• Not mentioned in the episode, but Charles Mangin’s (former guest and friend of the pod) designs: https://www.thingiverse.com/option8/designs

Sponsors:

• Kandji
• Black Glove
• Mosyle
• Watchman Monitoring

If you're interested in sponsoring the Mac Admins Podcast, please email [email protected] for more information.

Get the latest about the Mac Admins Podcast, follow us on Twitter! We're @MacAdmPodcast!

The Mac Admins Podcast has launched a Patreon Campaign! Our named patrons this month include Weldon Dodd, Damien Barrett, Justin Holt, Chad Swarthout, William Smith, Stephen Weinstein, Seb Nash, Dan McLaughlin, Joe Sfarra, Nate Cinal, Jon Brown, Dan Barker, Tim Perfitt, Ashley MacKinlay, Tobias Linder Philippe Daoust, AJ Potrebka, Adam Burg, & Hamlin Krewson

Another year, another operating system named after cats or cool spots to visit in California! And another cycle of trying to figure out which of our automations broke! We’ve had years to get used to it and it keeps getting easier, but it’s still part of the job. In this episode we’re stoked that Fiona Skelton agreed to join us and take us through a little of her process to stay sane amongst a constantly changing landscape!

• Tom Bridge - @tbridge777
• Charles Edge - @cedge318
• Marcus Ransom - @marcusransom

Guests:

• Fiona Skelton

Transcript:

Transcription of this episode brought to you by Meter.com

Click here to read the transcript

Links:

• dan-snelson/Nudge-Post-install
• Charles is disgusted and yet intrigued by interpreting python from within ruby
• #SorryNotSorry
  • https://www.tiktok.com/@robotsdraw/video/7130452906418982187
  • https://www.tiktok.com/@robotsdraw/video/7117724456365100330
  • https://www.tiktok.com/@robotsdraw/video/7123021864397720878
  • https://www.tiktok.com/@robotsdraw/video/7110035878424300846
  • https://www.tiktok.com/@robotsdraw/video/7110393706842230058
  • https://www.tiktok.com/@robotsdraw/video/7137369646272892203
• Gonzalez v. Google, LLC, No. 18-16700 (9th Cir. 2021)
• The Twenty-Six Words That Created the Internet

Sponsors:

• Kandji
• Black Glove
• Mosyle
• Watchman Monitoring

If you're interested in sponsoring the Mac Admins Podcast, please email [email protected] for more information.

Get the latest about the Mac Admins Podcast, follow us on Twitter! We're @MacAdmPodcast!

The Mac Admins Podcast has launched a Patreon Campaign! Our named patrons this month include Weldon Dodd, Damien Barrett, Justin Holt, Chad Swarthout, William Smith, Stephen Weinstein, Seb Nash, Dan McLaughlin, Joe Sfarra, Nate Cinal, Jon Brown, Dan Barker, Tim Perfitt, Ashley MacKinlay, Tobias Linder Philippe Daoust, AJ Potrebka, Adam Burg, & Hamlin Krewson

One of the tools we don’t talk about that much on the podcast but have all used is Carbon Copy Cloner. Before CCC, we wrote scripts to clone drives, figured out rsync, build manual imaging workflows with firewire drives, and in general just had this barrier of entry to do what should have been simple tasks that we really didn’t need. After CCC, there was a simple GUI with some fairly complicated logic underneath. Then it went far beyond the basic cloning technology to do much more and do it faster. We should have had Mike Bombich, the creator of CCC, on far earlier, but are stoked to finally nab an interview with him!

• Marcus Ransom - @marcusransom
• Charles Edge - @cedge318

Guests:

• Mike Bombich - @mbombich

Transcript:

Transcription of this episode brought to you by Meter.com

Click here to read the transcript

Links:

• https://bombich.com/

Sponsors:

• Kandji
• Black Glove
• Mosyle
• Watchman Monitoring

If you're interested in sponsoring the Mac Admins Podcast, please email [email protected] for more information.

Get the latest about the Mac Admins Podcast, follow us on Twitter! We're @MacAdmPodcast!

The Mac Admins Podcast has launched a Patreon Campaign! Our named patrons this month include Weldon Dodd, Damien Barrett, Justin Holt, Chad Swarthout, William Smith, Stephen Weinstein, Seb Nash, Dan McLaughlin, Joe Sfarra, Nate Cinal, Jon Brown, Dan Barker, Tim Perfitt, Ashley MacKinlay, Tobias Linder Philippe Daoust, AJ Potrebka, Adam Burg, & Hamlin Krewson

This week Tom sits down with three speakers from the Objective but the Sea v5.0 Conference held in sunny Spain.

• Tom Bridge - @tbridge777

Guests:

• • Patrick Wardle - @patrickwardle
  • Sharvil Shah - @sharvil
  • Cat Self - @coolestcatiknow

Transcript:

Transcription of this episode brought to you by Meter.com

Click here to read the transcript

Links:

• #OBTS v5 - Talks

Sponsors:

• Kandji
• Black Glove
• Mosyle
• Watchman Monitoring

If you're interested in sponsoring the Mac Admins Podcast, please email [email protected] for more information.

Get the latest about the Mac Admins Podcast, follow us on Twitter! We're @MacAdmPodcast!

The Mac Admins Podcast has launched a Patreon Campaign! Our named patrons this month include Weldon Dodd, Damien Barrett, Justin Holt, Chad Swarthout, William Smith, Stephen Weinstein, Seb Nash, Dan McLaughlin, Joe Sfarra, Nate Cinal, Jon Brown, Dan Barker, Tim Perfitt, Ashley MacKinlay, Tobias Linder Philippe Daoust, AJ Potrebka, Adam Burg, & Hamlin Krewson

One of our favorite things about interviewing security researchers is that those who can talk about what they do at places like DEF CON and Black Hat are the good guys. They exploit vulnerabilities and report their findings to vendors so that humanity can stay safer on our devices. If it weren’t for them, the vulnerabilities would likely be uncovered and sold on the black market or used by nation states. So a huge thanks to our guest Thijs Alkemade for his hard work and talk at DEF CON and Black Hat on process injection for Mac apps!

• Tom Bridge - @tbridge777
• Charles Edge - @cedge318

Guests:

• Thijs Alkemade - @xnyhps

Transcript:

Transcription of this episode brought to you by Meter.com

Click here to read the transcript

Links:

• Process injection
• CVE-2021-30873
• How Signing and Privacy Xcode Options For Developers Translate to MacAdmins - krypted
• Process injection: breaking all macOS security layers with a single vulnerability · Sector 7
• Thijs Alkemade (@xnyhps) / Twitter

Sponsors:

• Kandji
• Black Glove
• Mosyle
• Watchman Monitoring

If you're interested in sponsoring the Mac Admins Podcast, please email [email protected] for more information.

Get the latest about the Mac Admins Podcast, follow us on Twitter! We're @MacAdmPodcast!

The Mac Admins Podcast has launched a Patreon Campaign! Our named patrons this month include Weldon Dodd, Damien Barrett, Justin Holt, Chad Swarthout, William Smith, Stephen Weinstein, Seb Nash, Dan McLaughlin, Joe Sfarra, Nate Cinal, Jon Brown, Dan Barker, Tim Perfitt, Ashley MacKinlay, Tobias Linder Philippe Daoust, AJ Potrebka, Adam Burg, & Hamlin Krewson