Mac Admins Podcast

MacAdmins.org Podcast, Episode 33: Armin Briegel SYNOPSIS

After a roundtable on Punycode, SSL Certificates, and the AppleSeed Program, the team talks to Armin Briegel, freelance consultant and author of Packaging for Apple Administrators and Property Lists, Preferences and Profiles for Apple Administrators

YOUR HOSTS:

• Tom Bridge, Partner at Technolutionary LLC [@tbridge]
• Dr. Emily Kausalik, IT Support Engineer, RetailMeNot, Inc. [@emilyooo]
• Charles Edge, Director of Professional Services at JAMF Software, That Guy at Krypted.com [@cedge318]
• Pepijn Bruienne, R&D Engineer at Duo Security [@bruienne], Proprietor of EnterpriseMac.Bruienne.com

OUR GUEST:

• Armin Briegel, Freelance Consultant and Author [@scriptingosx]

LINKS & NOTES

Punycode

Punycode Phishing Attacks in the News

Chrome 58 & SSL Certificates

Let’s Encrypt

Appleseed Program

Insert Graphic On Certificate Common Name here.

Packaging for Apple Administrators – Armin Briegel

Property Lists, Preferences and Profiles for Apple Administrators – Armin Briegel

How not to bad things with autopkg

Gary Larizza’s Post

COMMUNITY CALENDAR Conference Sites

​
Aces Conference in Phoenix, AZ May 31 – June 1
MacDevOps:YVR in Vancouver, Canada Jun 4-6 17
MacDeployment in Calgary, Canada Jun 8-9 17
PSU Mac Admins in State College, PA July 11-14
JNUC in Minneapolis, MN October 24-26
​

Meet-ups

​
Mac DMV – May 3rd @ Apple Reston
Melbourne Apple Admins – May 4th @ CultureAmp
Mac Admins Monthly – May 9th @ Google New York
Utah Mac Managers Meeting with Jesse Endahl of Fleetsmith – Wed, May, 17th @ 11 AM MDT
Austin Apple Admins – Week of May 15th, looking for speakers, please contact Dr. Emily Kausalik, @emily on Slack.
Leiden, the Netherlands – May 18th – 6 PM

RATE US ON ITUNES!

Give Us Five Stars!

SPONSOR MACADMINS.ORG PODCAST!

If you’re interested in sponsoring the MacAdmins.org Podcast, please email [email protected] for more information.

SOCIAL MEDIA

Get the latest about the Mac Admins Podcast, follow us on Twitter! We’re @MacAdmPodcast!

MacAdmins.org Podcast, Episode 32: iOS 10.3 and Classroom 2.0 with Fraser Speirs SYNOPSIS

This week we welcome iOS Admin/Luminary Fraser Speirs to the pod to talk about the new iOS Admin features in iOS 10.3, Classroom 2.0 with ad-hoc classes, and the future of iOS for admin uses.

YOUR HOSTS:

• Tom Bridge, Partner at Technolutionary LLC [@tbridge]
• Charles Edge, Director of Professional Services at JAMF Software, That Guy at Krypted.com [@cedge318]
• Pepijn Bruienne, R&D Engineer at Duo Security [@bruienne], Proprietor of EnterpriseMac.Bruienne.com
• Marcus Ransom, Professional Services Manager at Education Advantage, [@marcusransom]
• Adam Codega, IT Administrator [@adamcodega]

OUR GUEST:

• Fraser Speirs, Apple Distinguished Educator & Head of Secondary, Cedars School. [@fraserspeirs]

LISTEN! LINKS & NOTES

Blog: Speirs.org
Regular podcasts: Canvas & Out of School

iOS 10.3

Apple Classroom 2.0

iOS 10.3

• New restrictions
• Limit Wifi to specified networks
• New OS update rules
• No longer requires supervision and DEP, just supervision
• New MDM commands – InstallASAP – starts to nag the user
• Apple Classroom Built In
• MDM-enabled Lost Mode can play sounds

Apple Classroom 2.0

• No longer requires MDM support or supervision on pupil devices
• Ad-hoc handshaking
• Pupils can refuse screen and Airplay control or locking control.
• The notion of a “current class”
• Appears as AirPlay target
• Manual groups in the class also appear

Thoughts on iOS 11

Neil Cybart: The Mac is Turning Into Apple’s Achilles’ Heel

• The world is moving past the Mac whether iOS is ready or not.
• iPad urgently needs to accommodate some proportion of “pro” users
• Article notes that 70% of the Mac user base rarely/never touch a “pro app”.
• These people should be on iOS already.

Future of Workflow?
Whither Sal Soghoian?
Canvas 22: Workflow: The Basics
Canvas 23: Workflow: Variables & Built-In Actions
Canvas 24: Workflow: Third Party Actions
Canvas 25: Workflow: Web APIs
Canvas 26: Workflow: Advanced Workflow Programming
Canvas 27: Workflow: Advance Workflow Programming Part II
Canvas 29: Workflow: Magic Variables

Next steps of Swift Playgrounds

• API expansion already happening (MapKit)
• Aggressively tracking language standard
• Authoring on iOS enhanced in last update (author multi page Playgrounds)
• Needs a UI builder?
• Multi-file project support
• Look to Pythonista

TapTyping – typing trainer suite – Flairify LLC

Theft & Loss Recovery

Theft & Loss Recovery for iOS Users

• Encrypted iCloud Backups after iOS 10 are awesome.
• Lost Mode for MDM-capable devices is great (as long as they have cellular or know a lot of Wi-Fi networks)
• Building a trusted system requires that you need not just one great password, but a couple good ones.
• (I always know my Apple ID password, login password, and 2FA Backup passwords, the rest I leave to Keychain)
• Can a password-less future get here soon enough?

1:1 Program History:

The iPad Project: How It’s Going
The iPad Project: Day One
The iPad Project Day Two
The iPad Project Day Six: The Hamiltonian Cycle
The iPad Project: The Night Before Christmas
The iPad Project: What Kind Of Day Has It Been?

COMMUNITY CALENDAR Call for Presenters

X World – 29 30 June (CFP open until 24th April)

Conference Sites

Aces Conference in Phoenix, AZ May 31 – June 1
MacDevOps:YVR in Vancouver, Canada Jun 4-6 17
MacDeployment in Calgary, Canada Jun 8-9 17
PSU Mac Admins in State College, PA July 11-14
JNUC in Minneapolis, MN October 24-26

Meet-ups

Boston’s Spring Meet-up – 19th April
Philly Apple Admins
London Apple Admins @ Sony Music – 20th April
Schiedam, the Netherlands – Dutch Macadmin meetup – April 20, 1:30-4:30
Melbourne Apple Admins – May 4th @ CultureAmp –
Leiden, the Netherlands – May 18th – 6 PM

RATE US ON ITUNES!

Give Us Five Stars!

SPONSOR MACADMINS.ORG PODCAST!

If you’re interested in sponsoring the MacAdmins.org Podcast, please email [email protected] for more information.

SOCIAL MEDIA

Get the latest about the Mac Admins Podcast, follow us on Twitter! We’re @MacAdmPodcast!

MacAdmins.org Podcast, Episode 31: So That’s Why We Have Slack, with Caleb Coy SYNOPSIS

A sitdown with Caleb Coy of Blurb to talk about where the Mac Admins Slack came from, what it’s like to move between positions, and a digression into what it’s like to use Fleetsmith as an admin. Some conversation about Mac Pros ensues.

YOUR HOSTS:

• Tom Bridge, Partner at Technolutionary LLC [@tbridge]
• Charles Edge, Director of Professional Services at JAMF Software, That Guy at Krypted.com [@cedge318]
• Pepijn Bruienne, R&D Engineer at Duo Security [@bruienne], Proprietor of EnterpriseMac.Bruienne.com
• Marcus Ransom, Professional Services Manager at Education Advantage, [@marcusransom]

OUR GUEST:

• Caleb Coy, IT Manager at Blurb, Inc [@calebmicah]

LISTEN! LINKS & NOTES

InstallApplications

iOS 10.3.1 Release Notes
Project Zero

TouchBar Macs need to talk to Apple at Activation

New Mac Pro articles:

Paczkowski
Gruber
Ulanoff
Full transcript at Tech Crunch
ATP

What’s a dodecahedron

What’s a sphere

What’s an icosahedron

Clips is out

COMMUNITY CALENDAR Call for Presenters

X World – 29 30 June (CFP open until 24th April)

Conference Sites

Aces Conference in Phoenix, AZ May 31 – June 1
MacDevOps:YVR in Vancouver, Canada Jun 4-6 17
MacDeployment in Calgary, Canada Jun 8-9 17
PSU Mac Admins in State College, PA July 11-14
JNUC in Minneapolis, MN October 24-26

Meet-ups

Boston’s Spring Meet-up – 19th April
London Apple Admins @ Sony Music – 20th April
Schiedam, the Netherlands – Dutch Macadmin meetup – April 20, 1:30-4:30
Melbourne Apple Admins – May 4th @ CultureAmp –
Leiden, the Netherlands – May 18th – 6 PM

RATE US ON ITUNES!

Give Us Five Stars!

SPONSOR MACADMINS.ORG PODCAST!

If you’re interested in sponsoring the MacAdmins.org Podcast, please email [email protected] for more information.

SOCIAL MEDIA

Get the latest about the Mac Admins Podcast, follow us on Twitter! We’re @MacAdmPodcast!

MacAdmins.org Podcast, Episode 30: It’s Not Just Sharks In Puddles SYNOPSIS

Updates, Updates, Updates! Everything got updated this week, and we’re here to talk about all of it.

YOUR HOSTS:

• Tom Bridge, Partner at Technolutionary LLC [@tbridge]
• Charles Edge, Director of Professional Services at JAMF Software, That Guy at Krypted.com [@cedge318]
• Pepijn Bruienne, R&D Engineer at Duo Security [@bruienne], Proprietor of EnterpriseMac.Bruienne.com
• Marcus Ransom, Professional Services Manager at Education Advantage, [@marcusransom]

LISTEN! LINKS & NOTES

macOS 10.12.4 Release Notes

Der Flounder: Third Party Installer Packages May Not Be Installable by the 10.12.4 OS Installer

Recovery Mode Behavior Changes

Patched EFI Firmware Models

Tethered Caching of iOS Assets from macOS 10.12.4

Changes to Apple ID 2FA

iOS 10.3

Democracy Sausage

COMMUNITY CALENDAR Call for Presenters

X World – 29 30 June (CFP open until 24th April)

Conference Sites

Aces Conference in Phoenix, AZ May 31 – June 1
MacDevOps:YVR in Vancouver, Canada Jun 4-6 17
MacDeployment in Calgary, Canada Jun 8-9 17
PSU Mac Admins in State College, PA July 11-14
JNUC in Minneapolis, MN October 24-26

Meet-ups

DFW Mac Admin meet-up – 13th April
Boston’s Spring Meet-up – 19th April
London Apple Admins @ Sony Music – 20th April
Schiedam, the Netherlands – Dutch Macadmin meetup – April 20, 1:30-4:30
Melbourne Apple Admins – May 4th @ CultureAmp –
Leiden, the Netherlands – May 18th – 6 PM

RATE US ON ITUNES!

Give Us Five Stars!

SPONSOR MACADMINS.ORG PODCAST!

If you’re interested in sponsoring the MacAdmins.org Podcast, please email [email protected] for more information.

SOCIAL MEDIA

Get the latest about the Mac Admins Podcast, follow us on Twitter! We’re @MacAdmPodcast!

Episode 29: Just Us Chickens SYNOPSIS

With no guests this week, the team talks about Wikileaks and Security, as well as the new iOS Security Guide, some new hardware options, and the best nail polish to use on the screws of your machines to make tampering evident.

YOUR HOSTS:

• Tom Bridge, Partner at Technolutionary LLC [@tbridge]
• Charles Edge, Director of Professional Services at JAMF Software, That Guy at Krypted.com [@cedge318]
• Dr. Emily Kausalik, IT Support Engineer, RetailMeNot, Inc. [@emilyooo]
• Pepijn Bruienne, R&D Engineer at Duo Security [@bruienne], Proprietor of EnterpriseMac.Bruienne.com
• Marcus Ransom, Professional Services Manager at Education Advantage, [@marcusransom]

LINKS & NOTES

Ransom Threat for 200M iCloud Accounts

macOS Logging Subsystems In A Gist

That’s A Moiré

Sonic Screwdriver PDF

Thunderstrike 2

Fuzzy Coat nail polish as anti-tamper measure

iOS Security Guide

RATE US ON ITUNES!

Give Us Five Stars!

UPCOMING CONFERENCES:

MacDevOps – June 5-6, 2017, Vancouver Canada, Early Bird Tickets are CAD $265 til March 11th

MacDeployment – June 8-9, 2017, Calgary Canada, Tickets available soon.

Penn State Macadmins Conference – Call for Proposals open! until April 4th

SPONSOR MACADMINS.ORG PODCAST!

If you’re interested in sponsoring the MacAdmins.org Podcast, please email [email protected] for more information.

SOCIAL MEDIA

Get the latest about the Mac Admins Podcast, follow us on Twitter! We’re @MacAdmPodcast!

Episode 28: Canadian Conferences, DEP + InstallApplication = Great MDM Options SYNOPSIS

In our first two-segment show, the Mac Admins Podcast talks with the organizers of MacDevOps YVR and MacDeploy to showcase two upcoming conferences in Western Canada this summer, as well as Erik Gomez of Pinterest about a new integration between Apple’s Device Enrollment Program and Chef, Puppet or Munki made possible by a popular MDM vendor you may have heard of.

In between, we launch the Community Calendar! Got an event we should announce on the show? Email us at [email protected].

YOUR HOSTS:

• Tom Bridge, Partner at Technolutionary LLC [@tbridge]
• Charles Edge, Director of Professional Services at JAMF Software, That Guy at Krypted.com [@cedge318]
• Dr. Emily Kausalik, IT Support Engineer, RetailMeNot, Inc. [@emilyooo]
• Pepijn Bruienne, R&D Engineer at Duo Security [@bruienne], Proprietor of EnterpriseMac.Bruienne.com
• Marcus Ransom, Professional Services Manager at Education Advantage, [@marcusransom]

GUEST:

Anthony Reimer, Organizing Committee for MacDeployment Conference, [@MacDeploy]
Mat X, Conference Organizer, MacDevOpsYVR [@MacDevOpsYVR]
Erik Gomez, IT Client Platform Engineer, Pinterest, [@Contains_ENG]

LISTEN! LINKS & NOTES

Brian Warsing’s managedmac Puppet plugin

ReiserFS

Joe Chilcote’s MacDevOpsYVR Talk on Contributing to Open Source

Joe Chilcote’s vfuse project

The Chic Geek – Calgary, Canada

Charity Majors

Open Source vs Commercial Software Steel Cage Death Match

Custom DEP Part One
Custom DEP Part Two
Custom DEP Part Three
Custom DEP Part Four

MDM documentation on InstallApplication: Apple’s MDM Docs

Casper Splash

From Erik, to do this in vfuse:
vfuse -i something.dmg -s “C00A00ZVXXXX” –hw-model “MacBookAir5,2” (Added as of December 2016 to vfuse)

From Charles, to do this without vfuse pop these into your vmx:
serialNumber.reflectHost = “FALSE”
serialNumber = “C00A00ZVXXXX” (replace serial number with your DEP enabled Mac’s SN)
hw.model.reflectHost = “FALSE”
hw.model = “MacBookAir5,2” (replace with proper hardware identifier)
smbios.reflectHost = “FALSE”

Come work at Pinterest:

IT System Engineer – Core Applications
Security Engineer – Information Security

COMMUNITY CALENDAR

Calls for Presenters

X World – 29-30 June (open until 24th April)

PSU Mac Admins – Open til 4/4/17

Community Meetups

MacDMV – Lightning Talks on 29 March in Washington, DC

MacBrained – Onboarding in a Culture First Environment @ New Relic in San Francisco, CA

Conference Sites

MacDevOps:YVR in Vancouver, Canada | June 4-6, 2017

MacDeployment in Calgary, Canada | June 8-9 2017

JNUC 2017 in Minneapolis Minnesota | October 24-26 2017

RATE US ON ITUNES!

Give Us Five Stars!

UPCOMING CONFERENCES:

MacDevOps – June 5-6, 2017, Vancouver Canada, Early Bird Tickets are CAD $265 til March 11th

MacDeployment – June 8-9, 2017, Calgary Canada, Tickets available soon.

Penn State Macadmins Conference – Call for Proposals open! until April 4th

SPONSOR MACADMINS.ORG PODCAST!

If you’re interested in sponsoring the MacAdmins.org Podcast, please email [email protected] for more information.

SOCIAL MEDIA

Get the latest about the Mac Admins Podcast, follow us on Twitter! We’re @MacAdmPodcast!

MacAdmins.org Podcast, Episode 27: Graham Gilbert, Writing & Contributing to Open Source SYNOPSIS

The Panel talks with Graham Gilbert, former consultant, now in-house systems engineer at Airbnb in San Francisco about writing and contributing to Open Source, amongst other things.

YOUR HOSTS:

• Tom Bridge, Partner at Technolutionary LLC [@tbridge]
• Charles Edge, Director of Professional Services at JAMF Software, That Guy at Krypted.com [@cedge318]
• Pepijn Bruienne, R&D Engineer at Duo Security [@bruienne], Proprietor of EnterpriseMac.Bruienne.com
• Marcus Ransom, Professional Services Manager at Education Advantage, [@marcusransom]
• Dr. Emily Kausalik, IT Support Engineer, RetailMeNot, Inc. [@emilyooo]

   

• James Smith, Editing & Sound Mix [@smithjw]

GUEST:

• Graham Gilbert, Systems Engineer, Airbnb [@grahamgilbert]

LISTEN! LINKS & NOTES

Graham’s Projects:
Sal
Crypt2
Crypt-Server
Imagr

Puppet Learning VM

Who Were You, DenverCoder9? What Did You See?

RATE US ON ITUNES!

Give Us Five Stars!

UPCOMING CONFERENCES:

MacDevOps – June 5-6, 2017, Vancouver Canada, Early Bird Tickets are CAD $265 til March 11th

MacDeployment – June 8-9, 2017, Calgary Canada, Tickets available soon.

Penn State Macadmins Conference – Call for Proposals open! until April 4th

SPONSOR MACADMINS.ORG PODCAST!

If you’re interested in sponsoring the MacAdmins.org Podcast, please email [email protected] for more information.

SOCIAL MEDIA

Get the latest about the Mac Admins Podcast, follow us on Twitter! We’re @MacAdmPodcast!

MacAdmins.org Podcast, Episode 26: Conference Talks, with Nadyne Richmond and John Welch SYNOPSIS

The Panel talks with longtime conference committee planners John Welch (MacIT/Macworld Expo) and Nadyne Richmond (MacIT/Macworld Expo/MacTech) about proposing good conference talks, preparing those talks, and everything conference-related.

YOUR HOSTS:

• Tom Bridge, Partner at Technolutionary LLC [@tbridge]
• Charles Edge, Director of Professional Services at JAMF Software, That Guy at Krypted.com [@cedge318]
• Adam Codega, IT Operations Leader at Upserve, [@adamcodega
• Marcus Ransom, Professional Services Manager at Education Advantage, [@marcusransom]
• Dr. Emily Kausalik, IT Support Engineer, RetailMeNot, Inc. [@emilyooo]

   

• James Smith, Editing & Sound Mix [@smithjw]

GUEST:

• Nadyne Richmond, Senior Manager of User Experience, Genentech [@nadyne]
• John Welch, Assistant Director for Technical Service at the Northwest Regional Datacenter at FSU, [@bynkii]

LISTEN! LINKS & NOTES

Tom’s Nestie

Documentation Talk: Take Vacations Using this One Weird Trick – Documentation! by Vanessa White and Rich Trouton

PSU MacAdmins CFP
X World CFP

Make Me Smart Podcast

RATE US ON ITUNES!

Give Us Five Stars!

UPCOMING CONFERENCES:

MacDevOps – June 5-6, 2017, Vancouver Canada, Early Bird Tickets are CAD $265 til March 11th

MacDeployment – June 8-9, 2017, Calgary Canada, Tickets available soon.

Penn State Macadmins Conference – Call for Proposals open! until April 4th

SPONSOR MACADMINS.ORG PODCAST!

If you’re interested in sponsoring the MacAdmins.org Podcast, please email [email protected] for more information.

SOCIAL MEDIA

Get the latest about the Mac Admins Podcast, follow us on Twitter! We’re @MacAdmPodcast!

MacAdmins.org Podcast, Episode 25: You Can’t Spell Function Without Fun, with John Kitzmiller SYNOPSIS

John Kitzmiller joins the podcast to talk about the MacAdmins.org Slack instance and how it came to be, as well as his excellent guitar collection, how to correctly say GIF, and why the only stickers you put on your laptop should be over the screws on the underside.

YOUR HOSTS:

• Tom Bridge, Partner at Technolutionary LLC [@tbridge]
• Charles Edge, Director of Professional Services at JAMF Software, That Guy at Krypted.com [@cedge318]
• Pepijn Bruienne, R&D Engineer at Duo Security [@bruienne], Proprietor of EnterpriseMac.Bruienne.com
• Marcus Ransom, Professional Services Manager at Education Advantage, [@marcusransom]

   

• James Smith, Editing & Sound Mix [@smithjw]

GUEST:

• John Kitzmiller, Fastly, JohnKitzmiller.com, [@JohnKitzmiller]

  LINKS & NOTES

The Apple Community Has Standards for Malware

Swift-Based Ransomware

Ransomewhere

Agile Deployment for Macs, from MacADUK 2016

Netflix Stethoscope

SHA-1 Collision

This MacBook Came Back From China With Half Its Screws Missing

RATE US ON ITUNES!

Give Us Five Stars!

UPCOMING CONFERENCES:

MacDevOps

MacDeploy

Penn State Macadmins Conference – Call for Proposals open!

SPONSOR MACADMINS.ORG PODCAST!

If you’re interested in sponsoring the MacAdmins.org Podcast, please email [email protected] for more information.

SOCIAL MEDIA

Get the latest about the Mac Admins Podcast, follow us on Twitter! We’re @MacAdmPodcast!

MacAdmins.org Podcast, Episode 24: Physical, Digital & Emotional Security, with Scott Piper YOUR HOSTS:

• Tom Bridge, Partner at Technolutionary LLC [@tbridge]
• Charles Edge, Director of Professional Services at JAMF Software, That Guy at Krypted.com [@cedge318]
• Pepijn Bruienne, R&D Engineer at Duo Security [@bruienne], Proprietor of EnterpriseMac.Bruienne.com
• Marcus Ransom, Professional Services Manager at Education Advantage, [@marcusransom]

   

• James Smith, Editing & Sound Mix [@smithjw]

GUEST:

• Scott Piper, Director of Security for Colorado-based security company, SummitRoute.com, [@summitroute]

LISTEN! SYNOPSIS

The gang talks with Scott Piper about security of all types, and where we’re all heading, security-wise. Is Anti-Virus a good idea? What should we actually be doing to make ourselves more secure? Some prognostication about WWDC occurs.

LINKS & NOTES

Cone of Silence

Start Your Passwords with a Slash

SIP

OS X Lockdown

Mosen Profile Docs

ASD iOS Guide

NIST on 2FA/SMS

Phishing graphs & stats (PDF)

Comparing Security Techniques

Serene

RATE US ON ITUNES!

Give Us Five Stars!

UPCOMING CONFERENCES:

Penn State Macadmins Conference – Call for Proposals open!

SPONSOR MACADMINS.ORG PODCAST!

If you’re interested in sponsoring the MacAdmins.org Podcast, please email [email protected] for more information.

SOCIAL MEDIA

Get the latest about the Mac Admins Podcast, follow us on Twitter! We’re @MacAdmPodcast!