Slashdot Mirror


Fake Your Own .Mac Server

c13v3rm0nk3y writes "A clever fellow named Otto Moerbeek has publish a short article on getting an OpenBSD box to emulate a .Mac server. Using Apache/DAV/SSL and a roll a duct-tape, he describes how you can get most .Mac functionality without paying Apple for it." This is useful because then you can use apple's backup tools to backup to a local server, and not have to backup over your piddly internet connection.

38 of 257 comments (clear)

  1. I wonder.. by Suppafly · · Score: 3, Interesting

    I wonder how many comments will get posted here before Apple cease and desists them.

    1. Re:I wonder.. by usr122122121 · · Score: 3, Insightful
      I read through this thread and was shocked by the number of people who claim to know Apple's exact intentions...

      Probably none of us know, but I can say for sure that Apple's programmers are smart enough that they wouldn't have used WebDAV if they wanted all the .Mac stuff to proprietary. It is as simple as that.

      We will all see Apple's actions soon enough.

      --

      -braxton
  2. Open servises. by Space+Coyote · · Score: 5, Insightful

    This kind ofstuff is great. Appletakes advantage of open protocols like webDAV to implement their services, and they'll still make lots of money off of .Mac. But for those who want to put in the time and have a spare machine lying around they can now get a lot of the advantages of .Mac, which might entice them to buy a new mac where they wouldn't have if it meant forking over for .Mac.

    I'm sur eApple saw this coming, and if they really wanted to prevent it they would have just added an authentication mechanism or something to block unauthorized servers.

    --
    ___
    Cogito cogito, ergo cogito sum.
  3. Magic Number by Inthewire · · Score: 5, Interesting

    According to the article you need to configure your server to return trialAccountDaysLeft = -1 How long before Apple changes that variable name, or obfuscates it somehow?

    --


    Writers imply. Readers infer.
  4. I'm all for the BSDs by (Not)Hellbourne · · Score: 3, Insightful

    ....but I think it should be noted that this doesn't depend on any BSD specific stuff, and can (pretty much, gotta get that https server up) just as easily be done under the /. championed linux.

  5. We need more fake servers by Istealmymusic · · Score: 5, Funny

    I like this idea. So we can emulate .Mac servers, BNETD servers, advertising servers, Cydoor servers, and even :CueCat servers. Setting up independent servers has the obvious advantage of being independent from an ultimate authority, decentralizing the service and making it more useful to the Internet community. So I ask Slashdot, what commericial or otherwise propertiary server will be reverse-engineered and cloned next? My vote is in for an Oscar/TOC server so one could use AOL-IM to communicate with one's LAN.

    --
    "The lesson to be learned is not to take the comments on slashdot too literally." --Vinnie Falco, BearShare
    1. Re:We need more fake servers by Glytch · · Score: 3, Interesting

      It won't be IM. Anyone who wants to roll their own for that will just use Jabber. It'll probably be some kind of Palladium server clone that will authenticate everything instead of just what you're supposed to see. Then you'll really see some cease-and-desist letters fly, if not outright DMCA-sanctioned arrests.

    2. Re:We need more fake servers by JasonAsbahr · · Score: 3, Informative

      It's getting there: http://www.twistedmatrix.com

  6. Re:Irresponsible? by budGibson · · Score: 3, Informative

    Actually, I agree with the post just above this. Apple is giving away software, basically because it is *not* the value-added portion of the service. The value-added portion of their service is the provision of a back-up location and other niceties. This article is not how to steal those. Rather it is about how to use their value-less software to your own ends, while *still using their hardware*.

  7. We need a new mod option... by Anonymous Coward · · Score: 5, Insightful

    "-2, didn't read article". :)

  8. Re:Irresponsible? by Kalak · · Score: 3, Interesting

    This isn't condoning the use of software without paying for it, it's giving a user a choice of "vendors" including users being a vendor themselves. If this were Microsoft that were being run-around, you'd probably say that it'd be a great thing. By Apple using open standards (the kind of thing /. has been clamoring vendors to do for ages now), they are allowing this as an option.

    Apple has a feature built into their OS. If you like that feature, you have to:
    1. Pay for their hardware
    2. Pay for their OS
    3. Find a service to use for .Mac.

    It's not like they're not getting any money in the deal here. Last I heard #1 & #2 were how Apple has been making it's bread & butter for years now. I'm glad Apple has let this happen, since I don't want to back up my notebook over a slow connection and rely on their server. I'd rather use a LAN, my server and my tape drive to provide extra backups. That's part of the reason I bought OS X. (read: Paid Apple Money for the software.)

    --
    I am, and always will be, an idiot. Karma: Coma (mostly effected by .hack)
  9. Re:Too bad... by platypus · · Score: 5, Funny

    ...getting a fixed IP costs way more than a .mac account.

    Well, I can sell you 192.168.0.1 really cheap, just mail me you kredit card number.

    Livetime access granted.

  10. Correct me if I am wrong but by einhverfr · · Score: 4, Insightful

    Isn't interoperability considered fair use in copyright law (Patent milage may vary). IANAL, however.

    I would assume that the author of the parent post is opposed to SAMBA and the SAMBA Howto information ;)

    (I confess, I don't use Samba anymore-- without Windows systems it sort of loses its appeal ;))

    --

    LedgerSMB: Open source Accounting/ERP
    1. Re:Correct me if I am wrong but by Angry+White+Guy · · Score: 3, Insightful

      Hey, cloudscout! Here's a dead horse, now beat it.
      The check is in the server to prevent people from using theirserver without paying.
      Do you know how many people are going to do this instead of using .Mac? None. The guys that are going to do this are the ones which have absolutely no intention of paying anyone to backup their data. Macs are not generally targetted at geeks, but mostly business users. The geeks that have macs are going to back up data in either the easiest or the hardest, most obscure way they can find. This case just happens to be the latter which turned into the former.

      Suck it up, nobody's buing this "You're stealing" shit. Especially on the third post about it.

      --
      You think that I'm crazy, you should see this guy!
  11. Another trick: Using iSync without .Mac by Ford+Fulkerson · · Score: 5, Informative

    Jeremy Beker has more informations about using iSync to syncronize calenders, addresses, etc. without using .Mac

    --

    Somewhere in the heavens... they are waiting.
  12. Re:Irresponsible? by Emugamer · · Score: 3, Insightful

    I think there is a difference here. This isn't stealing software, Someone already paid for Mac OSX and the apple hardware, this is replicating a service locally. You aren't getting a service for free ala directv card hacking, you are using your own server to provide the service instead of the companies, much like replacing windows update with your own -less broken version ( does anyone not block those ip/dns addresses?)

  13. sorry choose another... by nebenfun · · Score: 3, Funny

    That's MY IP number....

    Someone sold me that one awhile back.

    nbfn

  14. How about this by Chanc_Gorkon · · Score: 3, Interesting

    I am more interested in figuring out how to make a PC (Linux, Windows or whatever) appear as a mac to .Mac. Of course the other way is cool too! :)

    --

    Gorkman

  15. Re:Getting an OpenBSD box to emulate a .Mac serv by Lord+of+the+Files · · Score: 5, Insightful

    This isn't authenticating you to apple's backup server which unlimited trial days, it's authenticating you to your own backup server with unlimited trial days. Hence the rest of the article explaining about setting up DAV and whatnot to do the actual backups. Nothing illegal about that.

    --

    God does not play dice - Einstein

    Not only does God play dice, he sometimes throws them where they

  16. Duct tape? by einhverfr · · Score: 4, Funny

    "A clever fellow named Otto Moerbeek has publish a short article on getting an OpenBSD box to emulate a .Mac server. Using Apache/DAV/SSL and a roll a duct-tape, he describes how you can get most .Mac functionality without paying Apple for it."

    Is it just me or is anyone else trying to figure out what the duct tape is for?

    --

    LedgerSMB: Open source Accounting/ERP
  17. No Duct Tape? by kscguru · · Score: 5, Funny
    Am I the only one who was disappointed that he DIDN'T actually use a roll of duct tape?

    Really. I wanted to see an innovative use of duct tape on a Mac.

    Lousy Slashdot editors. Convincing me to read a story when there's actually no duct tape involved.

    --

    A witty [sig] proves nothing. --Voltaire

  18. Just in case... by RudeDude · · Score: 5, Informative
    A mirror of it.

    Provided by Mr HOSTBOT

    --
    RudeDude
    Perl/Linux/PHP hacker
  19. This has been up and advertised for months by tres · · Score: 5, Insightful

    There's nothing illegal about changing your /etc/hosts file. There's nothing illegal about setting up a WebDAV server for yourself.

    This isn't illegal. But try advertising a public iDisk server, or try redistributing Apple's Backup utility & you'll probably be needing a lawyer.

    Apple may be quick about protecting a "look and feel," but to keep Microsoft from "innovating" them any more, I think they have every right. This has been around for months, been advertised on MacSlash & is still running strong.

    --
    Notes From Under *nix: blas.phemo.us
  20. Woohoo! by Anonymous Coward · · Score: 3, Funny

    Now I can charge myself $99 a year!

  21. .Mac's security is bad by slamb · · Score: 5, Informative
    I saw this in the article:

    A self signed certificate will do, since Backup does not check the certificate.

    That's really bad. It means that anyone can launch a man-in-the-middle attack against someone using .Mac for backup purposes. I'm sure people are using .Mac to backup their Quicken financial data and other things they'd consider sensitive.

    I hope Apple fixes that...I'd be pretty pissed if I were a .mac user.

    1. Re:.Mac's security is bad by spicyjeff · · Score: 4, Informative

      Ironically, if you try to backup a Quicken 2003 data file via Backup 1.2 (latest version) the application will lock-up.

      Apple has known about this bug for awhile and apparently are "working on a fix" with Intuit but nothing in the past few months.

  22. O'Reilly Did It First by WatertonMan · · Score: 4, Interesting
    Actually O'Reilly had a set of instructions for putting together something like a .Mac server quite a while ago. Admittedly it wasn't as comprehensive in mimicking .mac as this article is. But a lot of the functionality was the same.

    The fact is that a lot of people want .Mac functionality but with a little bit more control on their part. I think that Apple may initially fight this but eventually will be forced to allow user controlled .Mac servers. Hell, perhaps they'll see it as an opportunity and sell a XServe.Mac.

  23. Re:Irresponsible? by medeii · · Score: 5, Insightful

    This is patently false.

    Apple has written software to be used with their .Mac service. The cost of the software is included in the price of the service.

    No, because the software in question is not delivered upon payment for its associated service. It is delivered upon payment for a different product -- it's a bundle, obviously.

    When you use the software without paying for the service you are, in effect, pirating the software.

    Actually, anyone who does this is simply using the software they own (it came with OS X, and they bought that, right?) in a manner inconsistent with its design. That's not illegal! Requisite analogy: A car manufacturer sells cupholders emblazoned with the Coca-Cola logo. Is it then [sarcasm]piracy[/sarcasm] to use said cupholders to hold a Dr. Pepper, or worse yet, your own no-name water bottle?

    You may justify this in your own mind by claiming that the price of the hardware and the OS should entitle you to the use of the .Mac backup software but that's not how it was intended.

    I don't give a flying fsck about intentions. Apple created a product and bundled it with their operating system; I bought the operating system, and thus I've purchased that product legitimately. It is not their business how I use that product; it's mine, and I don't remember reading a EULA that forbade me to use it with another service. (Even if it did, this comes pretty close to Connectix/Sony for obvious reasons.) As such, I am more than welcome to use my purchase any way I want, even if it means in a way that it's not intended to be used.

    The backup software is not a part of the OS. It is not included with the computer. It is a download available to .Mac users. It has built-in safegaurds to prevent use by people who do not pay for a .Mac subscription. By circumventing these mechanisms you are pirating the software.

    Yes, a .Mac subscription from Apple. But the poster is not cheating Apple; he's not accessing their servers and using their services. And because he's not using THEIR servers, there's no reason that he should pay them anything.

    --
    got standards? --- http://www.w3.org/
  24. ok, what about the rest? by weave · · Score: 3, Insightful
    It's hardly emulating a .mac server. What about the other stuff? How can I upload my iCal to it and have it magically generate the calendar html files? How can I publish my iPhoto stuff and have it build all the web pages that puts it all together and lets me manage the web account?

    ok, it's faking one bit of it so you can make backup work.

    I'm one of those that thinks .mac is a decent value and paid my money for it. I also find it ironic that Microsoft has yet to find any .Net services that people want to buy. MSN 8? I still haven't figured out what you get with MSN 8 that is so special. Spam filtering? You could do much better and get better filtering results by spending $30/year on a spamcop.net e-mail account.

    I originally thought that .mac was a cheesy ripoff of the .net name, but now I am loving the irony of Apple ripping off a Microsoft idea instead of the other way around.

  25. Big Whoop by maggard · · Score: 4, Informative
    1. This backup trick has been well known/well documented amongst Mac-folks for awhile now. It hasn't been earth-shaking news even though it has finally hit Slashdot. Doubtless Apple's folks have read the same reports and to date haven't changed anything.

    2. However there likely will indeed be a change to the authentication in the future. As the hack's author writes Apple's current method really is pretty lame and better ones should have been used from the start. At that point it'll be stick with the old backup client or go with the current and more secure/featureful.

    3. For all the sheep bleating on about Apple cease-&-desisting this etc. Apple has litigated to protect their trade dress, not this sort of material. After awhile repeating that same sort of foolishness just becomes trolling and unworthy of "News for Nerds. Stuff that Matters"

    4. While this is indeed a clever hack to make the backup function work to other servers it doesn't replicate .Mac, there's a whole lot more to it then that. Among other things it does offer WebDAV, software distribution, good website templates, virus-scanning, an excellent webmail client, superlative integration with their Mail client, IMAP, and of course ties throughout their OS. Whether or not it's worth what Apple is charging is worth suffering the limitations Apple has imposed (unannounced/uncontrollable email filtering, undefined bandwidth quotas, less-then-impressive availability, poorly implemented "family accounts") is open to question.

    5. Also note that this whole thing is a bit of a pain to enable for a somewhat useful utility. It prevents the Mac(s) from connecting to Apple's .Mac and frankly there are equally good or better backup methods. Again, clever hack but hardly useful as a serious long-term solution.

    --
    I don't read ACs: If a post isn't worth so much as a nom de plume to its author then I wont bother either.
  26. Re:Neat but... by tres · · Score: 3, Informative

    Apple can't "crush" this workaround. Once you have the software, you can use it. And you can use any WebDAV capable client to access your "iDisk" server.

    Yep, it would be pretty easy to do this on a Windows/Mac network, if Windows actually handled WebDAV folders as well as, say OS X, or Mandrake Linux. But since Microsoft has decided that WebDAV filesystems are neither web-pages or mountable filesystems, you can't really automate backups to WebDAV servers with your Windows machines. In WindowsXP you can do something like this, so long as you have a server that understands Microsoft's perversion of WebDAV.

    Someday Microsoft might "innovate" real WebDAV mounts into the filesystem (think flying pigs now), but until then, they are only good for point-and-click uses.

    It would be extremely easy to write a batch file to do this if you could mount the remote WebDAV server (like you can with a mac). After you write your batch file, you could just set up a scheduled task to copy the files over to the WebDAV server (basically what the Backup utility makes so easy).

    If you can use OS X or Mandrake Linux (probably other distros to--but I can't say for sure) you can have this functionality right now.

    --
    Notes From Under *nix: blas.phemo.us
  27. Re:Irresponsible? by Samosmatiker · · Score: 5, Informative
    From the author's main page:
    Is this illegal? As far as I know, it is not. I am not changing Backup, I am only changing the environment in which it runs. I am not trying to hack the iDisk or .Mac servers. The license does not even mention a .Mac subscription. While technically easy, I am not offering this as a service to the public. I've written these pages only to educate, showing that Apple has taken a short cut to proper server authentication.
  28. Apple should put .mac features ing MacOS X Server by benwaggoner · · Score: 5, Interesting

    There are lots of neat things that .mac does (I paid my $50), but it'd be great if I could do them locally. Backup is a HUGE one - 100Base-T is a lot better than DSL! But being able to use the pretty slick webmail for my own mail domain would be very useful as well, instead of having to forward to my mac.com address. Local iCal would be very nice as well.

    I can certainly understand why Apple doesn't want to make these available everywhere for free, but it'd be great if MacOS X Server 10.3 or whatever made it possible to provide some .mac services to my local users. Sure, there are variety of ways to hack it together, but if it all "just worked" that'd be better yet.

    This would certainly give me a reason to pay $1K to upgrade from the 10.1.5 server I'm running right now.

    And on an unrelated note, 10.3 REALLY should include a graphical DNS admin. It's really jarring to have all these great, simple controls for the whole server experience, except DNS. Webmin works, but still, that's hardly the MacOS X vision!

  29. Re:Is this legal? by raju1kabir · · Score: 4, Funny
    Is this legal? Somehow, it seems to me it could not possibly be.. (nor is it very ethical)

    Well, smoking crack is illegal and you're obviously doing a lot of that.

    The article explains how to customize Apple's backup software, included in OSX for which you paid over $100, to backup to a different server.

    That's about as unethical as using a Mister Microphone rather than listening to commercial radio.

    --
    "Patriotism is your conviction that this country is superior to all other countries because you were born in it." -- GBS
  30. Re:Neat but... by evilviper · · Score: 5, Insightful
    Is there a way to get it to work on mixed Windows/Mac networks?

    I always hate hearing this... IT'S A FRIGGIN' UNIX BOX!!! You can set it up to do anything a Unix box can do.

    You can have it e-mail an obscene message to Apple or Microsoft when the backup finishes. You can have it DoS slashdot.com every five minutes. You can have it insert a different virus into each file after the backup has finished... You can do anything with it that you can do with Unix.

    In conclusion: IT'S A FRIGGIN' UNIX BOX!!!
    --
    Slashdot gets worse every day... Pipedot: News for nerds, without the corporate slant
  31. And for MacOS 9 users... by Gorthaur · · Score: 3, Informative


    Neat. Under MacOS 9 you'll have to use a real WebDAV client (!= Network Browser) such as Goliath

    In case someone is interested, I created a quick and dirty how-to here

  32. What about iSync ... by Tjp($)pjT · · Score: 4, Insightful

    I just want an iSync replacement server instead of .Mac. I find it odd that if I buy a third party handheld, I can sync to it just fine, but I need a .Mac account to sync to my Apple hardware (Powerbook). Doesn't this just discourage Powerbook and iBook sales in favor of PDAs for those people who are borderline (well, that would mostly be iBook sales, but still). Seems an odd approach to marketing to lose some $1000 sales to make a few $100 sales. As my dad was fond of saying, "If it doesn't help make a sale, don't do it!" I'll be waiting for the bean-counters to settle it out with the actuaries.

    --
    - Tjp

    I am in wallow with my inner money grubbing capitalistic pig. ... Oink!

  33. tsk tsk, rob... old news. by BiOFH · · Score: 3, Insightful

    this is ancient news (and... didn't you gys already cover the o'reilly version ????).

    --
    - I am made of meat.