6 ms·

Has Apple released patches for El Capitan? I'm still using it instead of Sierra because of Karabiner but this could force me to upgrade. That vulnerability se

Has Apple released patches for El Capitan? I'm still using it instead of Sierra because of Karabiner but this could force me to upgrade. That vulnerability seems to be a pretty obvious oversight. I remember hearing about DMA (in the context of Firewire) as an attack vector since people first started talking of Truecrypt and Filevault and scrubbing the memory seems obvious... It's worrying that this could have been overlooked by Apple's engineers.

miguelrochefort 10y ago
You better update quick! /s Chances that someone use that device to hack your computer: 0
- deleted 10y ago
  [deleted]
wlesieutre 10y ago
Is Karabiner Elements missing features you need? https://github.com/tekezo/Karabiner-Elements https://github.com/tekezo/Karabiner-Elements I haven't tried it because I can't find the wireless mouse that I needed Karabiner for, but my impression was it has most of the functionality running, especially the key/button remapping which seems to be their biggest use case.
- nicolas_t 10y ago
  I haven't found a way to configure Karabiner Elements to replace Caps lock with Escape when I only press that key (for vim) and with Ctrl when I press it in combination with other keys (for the terminal). I also have both Shift keys bound to () when pressed alone and Shift when pressed in combination with other keys.
  - wlesieutre 10y ago
    Discussion of the caps lock solo/chorded feature here: https://github.com/tekezo/Karabiner-Elements/pull/170#issuecomment-257091685 https://github.com/tekezo/Karabiner-Elements/pull/170#issuec... Looks like it's not in master, but somebody has builds that do it.
    - nicolas_t 10y ago
      Thanks wlesieutre! I had looked in the issues but somehow missed that pull request. Now I can use Sierra :)
      - wlesieutre 10y ago
        Happy to help!
  - mnadkvlb 10y ago
    Thanks for the use-case, i am really fascinated to use this from now on. Working with vim would be awesome.
mweibel 10y ago
If that's the update: https://support.apple.com/en-us/HT207423 https://support.apple.com/en-us/HT207423 then yes.
- mapgrep 10y ago
  That changelog includes a bunch of fixes that are Sierra only, so the answer may be "no" contrary to your comment. This is the closest I can find on there to this issue and the fix is Sierra only: IOFireWireFamily Available for: macOS Sierra 10.12.1 Impact: A local attacker may be able to read kernel memory Description: A memory corruption issue was addressed through improved memory handling. CVE-2016-7608: Brandon Azad Attribution on that doesn;t look right; TFA was by "Ulf Frisk" who was nowhere on that page. Why would someone be using El Capitan still, some may ask. Well there is software not updated for Sierra yet. For example, GPG for Mac is not yet ported over.
nicholasserra 10y ago
Doesn't seem like the patch is for El Capitan, as all the kernel fixes only list Sierra.
pier25 10y ago
Apparently this fix is only available for Sierra 10.12.2 A nice big finger from Apple to those of us that won't upgrade.
M4v3R 10y ago
To be fair, it seems that all OS vendors overlooked this: https://www.youtube.com/watch?v=fXthwl6ShOg https://www.youtube.com/watch?v=fXthwl6ShOg

miguelrochefort 10y ago

You better update quick! /s Chances that someone use that device to hack your computer: 0

deleted 10y ago
[deleted]

wlesieutre 10y ago

Is Karabiner Elements missing features you need? https://github.com/tekezo/Karabiner-Elements https://github.com/tekezo/Karabiner-Elements I haven't tried it because I can't find the wireless mouse that I needed Karabiner for, but my impression was it has most of the functionality running, especially the key/button remapping which seems to be their biggest use case.

nicolas_t 10y ago
I haven't found a way to configure Karabiner Elements to replace Caps lock with Escape when I only press that key (for vim) and with Ctrl when I press it in combination with other keys (for the terminal). I also have both Shift keys bound to () when pressed alone and Shift when pressed in combination with other keys.
- wlesieutre 10y ago
  Discussion of the caps lock solo/chorded feature here: https://github.com/tekezo/Karabiner-Elements/pull/170#issuecomment-257091685 https://github.com/tekezo/Karabiner-Elements/pull/170#issuec... Looks like it's not in master, but somebody has builds that do it.
  - nicolas_t 10y ago
    Thanks wlesieutre! I had looked in the issues but somehow missed that pull request. Now I can use Sierra :)
    - wlesieutre 10y ago
      Happy to help!
- mnadkvlb 10y ago
  Thanks for the use-case, i am really fascinated to use this from now on. Working with vim would be awesome.

mweibel 10y ago

If that's the update: https://support.apple.com/en-us/HT207423 https://support.apple.com/en-us/HT207423 then yes.

mapgrep 10y ago
That changelog includes a bunch of fixes that are Sierra only, so the answer may be "no" contrary to your comment. This is the closest I can find on there to this issue and the fix is Sierra only: IOFireWireFamily Available for: macOS Sierra 10.12.1 Impact: A local attacker may be able to read kernel memory Description: A memory corruption issue was addressed through improved memory handling. CVE-2016-7608: Brandon Azad Attribution on that doesn;t look right; TFA was by "Ulf Frisk" who was nowhere on that page. Why would someone be using El Capitan still, some may ask. Well there is software not updated for Sierra yet. For example, GPG for Mac is not yet ported over.

nicholasserra 10y ago

Doesn't seem like the patch is for El Capitan, as all the kernel fixes only list Sierra.

pier25 10y ago

Apparently this fix is only available for Sierra 10.12.2 A nice big finger from Apple to those of us that won't upgrade.

M4v3R 10y ago

To be fair, it seems that all OS vendors overlooked this: https://www.youtube.com/watch?v=fXthwl6ShOg https://www.youtube.com/watch?v=fXthwl6ShOg