Slashdot Mirror
Mac OS X 10.2.8 Update, Take Two
javaxman writes "OS X users will find Mac OS X Update version 10.2.8 is available via 'Software Update'. If you did not install the previous 10.2.8 update, the size of the new update is 40.6MB. If you installed the previous update, the size of the new update is small, ~680K... if you can connect to the network, that is. Clearly you get different downloads depending on what you did with the previous 10.2.8 update. Apple Knowledge Base article 25524 has the details. It looks very familiar. I'm installing mine right away, how about you?"
Apple, I expect better of you --- even the OS X server people had to remove the system-installed version and compile their own to not be vulnerable to Denial of Service attacks. I suggest people post feedback for this issue.
If you installed the previous update, the size of the new update is small, ~680K...
... but it reported 580k for me. :)
"I either want less corruption, or more chance
to participate in it." -- Ashleigh Brilliant
Oooooh, two whole weeks? Get a life.
but I'm quite happy running Panther.
Even Textedit has a spring in its step!
Flame me if you'd like, but this fix has made OS X faster, cheaper, and the most stable of OSes.
In the immortal words of George "DoubleYa":
"Fool me once...shame on you....
Fool me twice...umm....
Shame..on...Shame...on...
Well you're not gonna fool me again..."
I'll wait for some other people to install first..
I had the "pulled" 10.2.8 update installed and downloaded this small fix. I had not experienced any problems with the "former" 10.2.8 update. And everything is working fine with this Mac OS X 10.2.8 (6R73) update. OK, I admit to fixing permissions as a precaution. So go ahead and download!
I'm installing mine righ
[NO CARRIER]
/* oops I accidentally made a comment, sorry */
This may fix the ethernet problem, I don't know, it didn't affect me, but there were other problems with 10.2.8, www.MacFixIt.com made a fairly extensive list.
./System/Library/Filesystems/hfs.fs/hfs.util. New permissions are 33261 ./System/Library/Filesystems/hfs.fs/hfs.util, should be -rwxr-xr-x , they are -rwsr-xr-x ./System/Library/Filesystems/hfs.fs/hfs.utilm issions corrected on ./System/Library/Filesystems/hfs.fs/hfs.utilu p differs on ./private/var/run/utmp, should be 0, group is 1 ./private/var/run/utmp ./private/var/run/utmp
This definitely does not fix the crashing problem. (on my beige G3)
It can happen at any time, and is sometimes mistaken as an inability to wake from sleep, but you can get it to happen reliably by trying to repair permissions.
It outputs the following, then shuts down the display, and needs to be hard-restarted.
2003-10-03 17:36:12 -0400 - Repair of privileges has started
We are using special permissions for the file or directory
Permissions differ on
Owner and group corrected on
Per
Gro
Owner and group corrected on
Permissions corrected on
"The worst tyrannies were the ones where a governance required its own logic on every embedded node." - Vernor Vinge
I'm installing mine right away, how about you?
I think I'll wait for others this time around, thanks. My poor powerbook's battery life certainly can't take another hit while it's already flat on its back.
And no, it actually did affect the battery life on my machine, not just the timer.
got standards? --- http://www.w3.org/
Screw 10.2.8, Panther has been declared Gold Master!!!
From Apple Insider
Installed the update to the update, no problems so far, will keep apprised if the situation changes.
Integrate Keynote and LaTeX
I tried that, although it was before I installed the replacement-10.2.8 version.
And I've tried repairing permissions in single-user mode too. (it doesn't crash, but it doesn't fix the problem either).
"The worst tyrannies were the ones where a governance required its own logic on every embedded node." - Vernor Vinge
Uhoh, Apple zealot alert. Meanwhile, moving into the land of people who actually have to get work done with their machines, waiting 2 weeks for a security fix is actually significant. I doubt the (unusually ontopic) first post is going to see positive moderation, because it dares to make sensible criticism.
.. and somehow Finder seems to be a litle more responsive on my powerbook 15"...
...but not showing up in the Software Update. Odd, because Apple has this page on the G5 10.2.8 update. Has anyone else been able to download the G5 version of 10.2.8 using the Software Update?
Bob
The PC Weenies: 11 Years of Online Tech 'Too
The link to the knowledge base article return a "not found" error ... searching downloads for "10.2.8" returns no results ... the Apple software update page doesn't have it ... didi this get pulled too?
"." drwxrwxr-t root/admint " -rw-r--r-- root/wheelt " -rw-r--r-- root/wheelx t" drwxr-xr-x root/wheelx t/Contents" drwxr-xr-x root/wheelx t/Contents/Info.plist" -rw-r--r-- root/wheelx t/Contents/MacOS" drwxr-xr-x root/wheelx t/Contents/MacOS/AppleGMACEthernet" -rw-r--r-- root/wheelx t/Contents/Resources" drwxr-xr-x root/wheelx t/Contents/Resources/English.lproj" drwxr-xr-x root/wheelx t/Contents/Resources/English.lproj/InfoPlist.strin gs" -rw-r--r-- root/wheelx t/Contents/Resources/English.lproj/locversion.plis t" -rw-r--r-- root/wheelx t/Contents/version.plist" -rw-r--r-- root/wheelm ent.bundle" drwxr-xr-x root/wheelm ent.bundle/Contents" drwxr-xr-x root/wheelm ent.bundle/Contents/Info.plist" -rw-r--r-- root/wheelm ent.bundle/Contents/MacOS" drwxr-xr-x root/wheelm ent.bundle/Contents/MacOS/PowerManagement" -rwxr-xr-x root/wheelm ent.bundle/Contents/version.plist" -rw-r--r-- root/wheel
"./System" drwxr-xr-x root/wheel
"./System/Library" drwxr-xr-x root/wheel
"./System/Library/CoreServices" drwxr-xr-x root/wheel
"./System/Library/CoreServices/ServerVersion.plis
"./System/Library/CoreServices/SystemVersion.plis
"./System/Library/Extensions" drwxr-xr-x root/wheel
"./System/Library/Extensions/AppleGMACEthernet.ke
"./System/Library/Extensions/AppleGMACEthernet.ke
"./System/Library/Extensions/AppleGMACEthernet.ke
"./System/Library/Extensions/AppleGMACEthernet.ke
"./System/Library/Extensions/AppleGMACEthernet.ke
"./System/Library/Extensions/AppleGMACEthernet.ke
"./System/Library/Extensions/AppleGMACEthernet.ke
"./System/Library/Extensions/AppleGMACEthernet.ke
"./System/Library/Extensions/AppleGMACEthernet.ke
"./System/Library/Extensions/AppleGMACEthernet.ke
"./System/Library/SystemConfiguration" drwxr-xr-x root/wheel
"./System/Library/SystemConfiguration/PowerManage
"./System/Library/SystemConfiguration/PowerManage
"./System/Library/SystemConfiguration/PowerManage
"./System/Library/SystemConfiguration/PowerManage
"./System/Library/SystemConfiguration/PowerManage
"./System/Library/SystemConfiguration/PowerManage
jeeze
I don't want to start a holy war here, but I was really scared that 10.2.8 ate my battery life for good. I'm so happy to see the familiar 4h+ is back (battery is about a year old; iBook 800 12").
It's a little unclear whether the new problems in OpenSSL have been patched. According to the CERT page, Apple is reporting the vulnerability as fixed in 10.2.8. On the other hand, I have a 10.2.8 machine that still indicates OpenSSL version 0.9.6i, which is supposedly vulnerable.
Again, on a side note, I wish Apple would allow security updates to be installed independently of the main bulk upgrade.
PANTHER IS HERE!!! 10.3!!!http://www.apple.com/macosx/panther/
W0000t! 10.3 is teh best!
The flurry screen saver seems very blocky now. Like a bunch of rectangles on the screen. Also abstract no longer shows pictures. The dock icons also turn into folders now instead of the program icons. The OS does seem a little snappier.
No more transparent dock - but other than that everything seems to be just fine.
I dont have an Apple you insensitive clod!
The best I do is Linux with various Aqua themes for icons, window manager, Gkrellm, XMMS, Mozilla, etc.
By the time I can afford a G5, Steve Jobs will be pushing up daisies.
WORKSFORME
(ok that's really 3, but bugzilla users will understand)
...on a PB G4 550. Finder seems a little slower than usual though... Perhaps they are slowing it down on purpose so that we are all pressured to upgrade to Panther? :^)
Slashdot's first reaction to VMware
...and it only took 15 minutes instead of the usual 20 to copy that 17 meg file from one folder on the hard drive to another folder. 10.2.8: The Sequel was worth the wait!
So I ain't toucing this. If it ain't broke. . .
I am a believer of momentum and curves.
Sendmail and SSH are off by default. Sendmail is particularly difficult (e.g. there's no GUI) to enable.
There exists no way of exchanging information without making judgments. --Bene Gesserit Axiom
640K ought to be enough for anybody.
blog
I am on a 15'' 1Ghz tiBook with 10.2.8 and my dock is still transparent...
I just installed the latest update on my 12" Powerbook and wanted to see what exactly they'd done with the battery timer. I was really pissed when my battery life was halved (literally, I timed it), instead of just the indicator lying to me as Apple swore.
Right now, as I type this post, my battery is at 96% charge and the timer is widly fluctuating starting at 8:35, then 5:35, then 4:45, now 4:10, back to 3:42, and again at 3:59.
What I really liked about 10.2.6 was that the battery timer was really accurate for some reason. I have read many posts here and on other Macintosh websites that say the battery timer is never to be trusted, but I just couldn't believe them.
Back to 4:02.
Perhaps, if SSH and Sendmail were enabled in a default install, you might have a point.
Not all is well. On my 1G Ti, Friday's 10.2.8 changed all the icons on my PDFs - even those with custom icons - to Adobe icons. It also changed the owner of my Eudora settings files to Spark ME.
Don't know what else is wrong but that's not nice.
Tards.
- Zav - Imagine a Beowulf cluster of insensitive clods...
Comment removed based on user account deletion
>If you installed the previous update, the size of >the new update is small, ~680K... if you can >connect to the network, that is.
Well, you could always put it on a floppy di....damnit.
%\
Meanwhile sendmail is not only not enabled by default, but there is no way to enable without the command line.
As for ssh, is there a working root exploit out? Just about *everything* that connects to the internet is vulnerable to connection overloading via a DoS. This makes it easier, sure, but that a DoS is possible isn't exactly a deal breaker.
Finally, if you are using these in a production environment where security patches are time-critical, you should probably be compiling your own versions of these services and not depending on Apple.
I would have liked to see the security patches to come faster as well, but for these kinds of things its not a big deal to me if they are a bit lax.
Integrate Keynote and LaTeX
Since the update addressed issues I was having with my MS Bluetooth mouse, I installed it. Now I'm having mysterious issues with waking from sleep. Going to try resetting the Power Management Unit as a fix after I give DiskWarrior a shot at the hard drive. Have already reset PRAM and NVRAM with no luck.
Can't you see that everyone is buying station wagons?
OK I'm taking Apple to small claims court now no matter what their response. 2 weeks ago I installed 10.2.8 and it shredded my iBook's battery time down to an hour or less. It took nearly 10 phonecalls back and forwards between apple, my applecentre and I to get Apple to give me ANY kind of solution. Even then it was just a fax to tell me they won't do anything unless the battery doesn't work after an update "in the coming days".
Now it's here, my battery gets 20 minutes, and Apple are still denying responsibility.
So the Software Update icon is dancing happily in the Dock.
Make sure you are using windowsupdate.com instead.
Obviously this fix wasn't properly tested on a PC.
I hope this helps someone out there.
...where Sendmail has a GUI.
immediately after downloading the update, I had a minor startup crash- it just restarted itself, then took a while to boot. It seems to be fine now, but if you have any extremely important data you should back it up just in case (you should always do this before doing anything that touches your system).
...but the limit is 2 minutes.
YHL. HAND.
Definitely wouldn't surprise me.
This update anally raped my mother while pouring sugar in my gas tank.
Meanwhile, moving into the land of people who actually GET work done on their machine, there have been instructions available for rolling your own ssh, replete with fix, available for roughly 12 days now.
Get off your ass, do some work, and stop complaining - you fscking tool.
I need to vent guys and here I hope I find sympathy! I HATE MACS
Today I spent the good part of five hours helping a friend with a titanum powerbook put an 802.11 card in, she bought an apple Airport one. The first amazing thing comes when it doesn't fit in the slot, but a quick call to the apple seller and they tell me it has to go INSIDE THE MACHINE. My friend had opted not to get them to install it as it was an extra $20 fee, so she took it home and I got the job as I'm the "Computer Guy" and can generally help friends and family with there computer problems. I have never seen such a tragedy of design as the TiBook!
First I had to take the entire thing apart. This, if you've been inside a laptop, is not an easy trivial task. It needs the battery and case to come off, the drive and optical drive to come out, and apples STUPID design inside them meant I had to file away some parts as they were put in without obviously meaning to be taken apart again. Now I know computers are throwaway things nowadays but that's ridiculous! We also had to use snips to cut some tiny pieces of shielding off to get to the right screws. I can see why they were charging so much to put the card in, she should have gone with that option! In the end finally I was able to lever up a part of the inside to push the airport card inside and click it in place. But that wasn't enough, an aerial cable then needed to be connected, and getting it out of its holder was another half hour of work where I had to pull the airport card out again!. Finally with it all back together it works. The inside I think is back where it should go. But, the back doesn't go back on how it should and I think it is a little bent.
I don't, I really don't, see how Apple can claim to be tops in design. Even my A600 was a dream to work on compared to this and it was pretty compact too! Why they couldn't put it in an easily accessed slot like normal PC notebooks I don't know. Anyway, I've talked my friend into getting rid of her Mac addiction, she will definitely be buying a Dell next!
After applying this update, all my MP3's are now Quicktime Movie files...
When I try to open one, instead of invoking iTunes, my system opens macam - software to drive my webcam.
Very confusing. I need to dig some more...
This is not as bad as my trial with Windows XP this morning... Roaming Profiles SUCK...
Please stop encouraging FUD-boi penquinistas who can't RTFA in the first place.
Thanks.
- learn to swim.
Unless the update specifically fixes something that you are having a problem with, why install these interim updates at all? Remember the good old days when the free updates offered significant performance increases and new features? (Like 8. something). They ain't doing that anymore.
The message from Apple Product Security includes advice on fixing the sendmail vulnerability on 10.1.5 - which is a very good thing - but nothing similar for OpenSSH or OpenSSL.
Now, OK, from what I gather the sendmail bug is more serious in that the vulnerabilities in OpenSSH and OpenSSL seem to be limited to DoS, but wouldn't similar instructions to updating OpenSSH/SSL on 10.1.5 be useful?
Well, maybe Apple has once failed to manage to do the grunt work for you in a timely manner. If i recall well, most other security holes had been addressed very rapidly in the past. This particular one tanked because it was rolled out as part of a buggy overall update. Big deal. That security hole existed on a service that is not enabled by default. And unless you are an Xserve customer with a valid, active support license, Apple doesn't owe you shit. Complain all you want. But if you enable "remote access" from your control panel, you should have a minimal understanding of the risks it presents and be prepared to cope with potential security issues, and unless you pay Apple, be prepared to wait for a patch.
But you see, in the end, you still benefit from Apple's original architecture decision for the core of their operating system: An open-source operating system. Full disclosure as to where the bug lives. As you said it, even the OS X server people had to remove the system-installed version and compile their own to not be vulnerable to Denial of Service attacks.
Be GLAD you were able to do that. Systems administrators who maintain production-environment servers have had OPTIONS as to how to deal with this situation, based on priorities. Sure it would have been nice to let Apple do the work for you. But hey, if you maintain something of importance, you'd better know your way around the operating system you maintain. But since those are all open-source components, chances are there were about 892739847238974 other people who had found a workaround and/or a solution to your problem within hours of the vulnerability being found, and chances are a good chunk of them have shared those solutions with the community at large.
There is no such thing as a secure operating system. A secure operating system is not connected to any network and doesn't otherwise interact with anything or anybody. Security is a frame of mind, procedures and processes surrounding the usage of computing facilities, and does not exist in an absolute form. Certain practices and philosophies allow administrators to build systems that are more secure than others. But it is all relative.
Take an off-the-shelf Jaguar installation, install it on a mac, then run nmap on that machine. How many ports will you find open? ZERO. NONE. NADA. ZILCH. not one. Why? How many will you find on windows? 5 to 10 depending on which flavor you're installing.
Extraordinary Vacations. Exceptional Prices
Looks like most of the update is Security Fixes in 3rd party software (openssl/openssh/sendmail) instead of a lot of bug fixes and some backports from 10.3.
:)
Hopefully 10.3 goes gold quickly
-- Cliff Albert
Did anybody else have this problem? My .docs arent with word anymore, my .txt's are with GoLive 6 and my pdf's finally show adobe. Though none of the original associations changes...
installed 10.2.8 on my 17" iMac G4 800 and there were no problems whatsoever. I ran repair permissions, tried the progs I use most, no problem.. my Xbench scores haven't changed.
I've been proud of Apple, but this wasn't one of their best moments.
plug it in, boot holding cmd-option-O-F, when you get to the OpenFirmware prompt type:
reset-nvram
reset-all
some 'flashing' messages will happen and the machine will reboot. discharge the battery fully and then charge it fully. repeat once if needed.
The iBook batteries are pretty flaky, yours might actually be dead if this doesn't fix it. Call and tell Apple that your battery is dead and send it back, make use of that AppleCare you bought (you did buy it right?).
"Sometimes, I think Trent just needs a cup of hot chocolate and a blankie." -Tori Amos on Nine Inch Nails
Does anyone have any inside deets on what the major fuck-up was with the first revision?
I know that bugs are bugs, but I'm particularly curious about what was responsible for the halved battery life. Was there some rogue process factoring random numbers constantly in the background that slipped in, or something?
-ben
myselfmusic
Most of us installed the first version of 10.2.8. Only those with dual 450's on slow ethernet networks had a problem, and that was easily fixed by swapping out one file.
Woah, I have a Voodoo II, and an overclocked bus too...
Something tells me this is not a coincidence.
I guess I might as well yank the VoodooII, it's not like I can actually use it under OSX anyway. How do you even know it's not shutting down?
"The worst tyrannies were the ones where a governance required its own logic on every embedded node." - Vernor Vinge
I've seen this posted about 4 times now across several Apple stories.
Let the flames BEGIN! mwahahaha ;)
Fight Crime - Shoot Back!
May as well chip in with my 2 fractional money units.
Just applied this update to my Quicksilver 933, and all went reasonably well, though on reboot the keyboard and mouse was unresponsive. Mouse pointer just sat in the upper-left corner, unmoving.
I had to pull the Apple Display cable out of the back of the unit to reset the USB hub in the display to get the keyboard and mouse attached to work. No biggie, I guess.
Perhaps it was the DLink USB Bluetooth adapter in the keyboard hub?
-- clvrmnky
So, I'm glad this update fixes Ethernet problems in Dual 500 systems..
Unfortunately my new eMac still won't restart, shutdown, or logout -- and still have the other problems associated with the original 10.2.8 Update.
Great work, Apple. Is a not-f*ed up eMac a selling point for buying Panther, now?
The next comment I write will be ready soon, but subscribers can beat the rush and see it early!
Bah, i understand your and other people's frustration. Heck that made me feel uneasy too. Yes you and I both paid Apple for their OS. But, if you think about it, what you really pay for is an operating system that is more mature and more secure than, say, windows.
Security fixes, if they really matter, in the end, are the responsibility of the System Administrator. Not Apple. That's the whole point of running an operating system whose core underlying services is open-source software: if you want to be lazy, like I am, you can wait for Apple to release a patch. If security issues surrounding services that are by default not enabled really do matter, then the open-source nature of your operating system enables you to actively seek patches. Think about it, isn't that a valid reason to buy OS X? Having alternatives?
But yeah, rolling it out as part of a larger upgrade is a bit unfortunate, but again, think about it, those security holes are by no means security holes that would affect any significant portion of their user base, since those services are disabled by default, especially sendmail, for which you MUST use the command line. They were on the brink of releasing a slew of updates as part of 10.2.8, why not roll those security fixes with it? I can't imagine upgrade patches being that cheap to set-up, and any less of a pain in the ass. They've gotta implement patches, package them up, publish detailed release notes to their knowledge base, release the packages to their upgrade servers and all that crazy shit. They're a company with a finite amount of resources, as much as they appear to make every effort to please, gain and retain the trust and interest of their user base, i'm sure it still just made good sense to roll out those particular security fixes as part of a larger upgrade. Also, if you look at the release notes, they call those "Security Enhancements".
A security fix, to me, would have been, for example, a glaring security hole in safari allowing malicious coders to write a web page that'll sniff out all the cookies you have stored on your machine for many popular domains, such as authentication tokens on Amazon.com. Because, unlike ssh and sendmail, everybody uses a web browser, and most people who use a web browser are not computer geeks who should know about potential risks involved with allowing your machine to listen for incoming connections on any TCP port. Back in the days of 10.1, there was a security hole in Internet Explorer 5.1 for OS X that could allow an attacker to do evil shit using a terminal. That got patched in its own security patch.
Extraordinary Vacations. Exceptional Prices
I just installed this on my 12" PB and repaired permissions.
The update seems very buggy overall. I have encountered the following problems so far:
- startup time is very long, with very windows-like behavior (i.e. desktop draws very slowly on startup and menus draw bit by bit instead of popping up all at once like before)
- iTunes skips horribly on files that played fine before
- Mail.app causes system to freeze up momentarily (spinning beach balls galore)
- system feels more sluggish and unstable overall.
I ran top to try to see what the problem was, but I could not see anything obvious. It seems like there is some very bad code somewhere in the update though. I am trying to decide if I should 'downgrade' back to 10.2.6 or just suck it up for a while and wait for 10.3.
Not recommended.
I'm installing mine right away, how about you?
Uh - NO.
You must be joking.
Did anyone else get Flash installed with the update? I notice the update included Safari enhancements, so maybe they included it there.
It's not that big of a deal. It just took me a while to figure out that I had been infected with the monster. I generally try hard to avoid it, and I am trying to figure out where it came from.
Does Apple do anything that requires Flash?
"She's a scientist and a lesbian. She's not going to let it slide." Orphan Black
I just got an iMac 1.25 GHz, and since it seemed the majority of the problems reported were on iMacs, I held off on the 10.2.8 update. Today, with much trepidation, I installed the update, and I haven't had any problems with mysteriously changing icons, crashes, running programs or network connectivity (yet).
For whatever it's worth.
I have a Beige G3 desktop that is freezing with 10.2.8 installed. It doesn't seem to matter what I do, the freeze is actualy the screen going black and no drive activity nothing.
At first it showed up only in Safari, then it happened in Disk Copy, and now if I try and use Toast 6. Short of reinstalling OS back to 10.2.6, I don't know what I can try.
Regards,
Ryan Pritchard
Fun Extends All Basic Life Expectancies
If you post, they will mod it.
I just felt the need to post because of all the noise in here.
I applied the original update to an iMac DVSE 500Mhz G3, and an iMac G4800 superdrive. Neither machine had any problems that I could notice, and none of the problems that I read about.
I have applied the new 10.2.8 to both machines with success as well, and as yet no adverse side effects that I can note.
Strangely, I just recieved my brand new 1Ghz 12' AlBook, and it came with 10.2.7 installed - which I had thought was just for G5s? I have updated it to the new 10.2.8 with no problems that I can tell.
All is well in Appleville for this little resident...
http://docs.info.apple.com/article.html?artnum=951 33
It took a few minutes to find. The only tool you require is a screwdriver (or torx, depending on the model).
Your friend used the wrong 'tool'.
Off topic: Living in your parents basement, playing quake and downloading porn does not make you a 'computer guy'. I bet you've got a t-shirt too.
This update fixes what was a serious useability problem on my iMac 700, previous update 10.2.6. None of the recommended Classic mode configuration tweaks (turn off extensions, install in a separate partition etc.) fixed what was a disruptive behavior.
Casual observation indicates speed of Classic applications (app startup, Pagemaker redraws) is dramatically improved.
Yay!
Accepted Software Update's 10.2.8 package.
Rebooted as suggested.
Got grey Apple logo on light-grey background, which after a while, turned to a grey circle-slash logo on light-grey background. System was locked, had to pull the power cord.
Disconnected FireWire external drive, powered up the Mac, same symptom.
Tried booting from 10.2.6 install CD, same thing.
Rebooted, went into Open Firmware, did a reset-nvram and a reset-all. System rebooted, same circle-slash.
The Mac is a G4/450, 512MB RAM, two 10-GB IDE HDs.
It was running 10.2.6 and various seeds of Panther without problem.
Fortunately, my data lives on our network, but quite annoying.
Hi RalphB - Same problem here. Your email is not on /., can you reach me on alexandre@leroux.net please, I'd like to know more about your 10.2.8 problems and if you succeeded in repairs. Thanks a lot ! :-)
Animoog.org