Archive
AIX Most secure OS? Think not.
IBM’s Xforce published their new 2008 annual report. In it they had this chart:

Surprising is that IBM put’s one of their own OS’s near the bottom of the list. Some of my opinions are :
1. No one uses AIX that much, so no one looks for holes in the code.
2. Any one who uses AIX, doesn’t have it directly connected to the Internet.
3. It is so cost prohibitive to use, that people are looking at Solaris/Linux or Windows to run their business on.
But the funniest thing about this is the last I used AIX the following were still done on install by IBM:
1. telnet enabled
2. root logins allowed remotely
3. no ssh comes with the OS, you have to install a crappy “linux toolkit”, and then install another 10 different packages to get SSH enabled.
4. No RBAC
5. Syslog configuration does not exist
6. Root does not even have a password on install
Seems to me that IBM needs to fix some fundamental issues with their OWN OS before they can say it is not one of the “Most Vulnerable Operating Systems”.
The funniest issue with this is for MacOSX to be listed at the top, all most all of those require some one to actually run something on the machine with administrative privileges.
Changes to Leopard that most people won’t see or care about
One of the things I like about Leopard is that it is UNIX.. With that one of the changes I first noticed was that now you can use “ps -eaf” instead of “ps -aux”. Nice, I hated doing ps -aux, as I use solaris all the time and /usr/ucb/ps is almost never used. The one draw back is that it does not print the username it prints the uid in the output:
UID PID PPID C STIME TTY TIME CMD
0 1 0 0 0:01.06 ?? 0:01.14 /sbin/launchd
0 10 1 0 0:00.58 ?? 0:00.66 /usr/libexec/kextd
0 11 1 0 0:02.75 ?? 0:04.55 /usr/sbin/DirectoryService
0 12 1 0 0:00.52 ?? 0:00.75 /usr/sbin/notifyd
0 13 1 0 0:00.65 ?? 0:01.05 /usr/sbin/syslogd
0 17 1 0 0:01.57 ?? 0:02.86 /usr/sbin/configd
1 18 1 0 0:00.42 ?? 0:01.01 /usr/sbin/distnoted
65 19 1 0 0:00.05 ?? 0:00.09 /usr/sbin/mDNSResponder -launchd
0 24 1 0 0:00.12 ?? 0:00.30 /usr/sbin/securityd -i
0 28 1 0 0:00.33 ?? 0:00.48 /usr/sbin/ntpd -n -g -p /var/run/ntpd.pid -f /var/db/ntp.drift
0 30 1 0 0:06.96 ?? 0:06.96 /usr/sbin/update
0 34 1 0 5:20.79 ?? 11:21.33 /System/Library/Frameworks/CoreServices.framework/Frameworks/Metadata.framewo
rk/Support/mds
501 35 1 0 0:00.39 ?? 0:00.84 /System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow conso
le
0 36 1 0 0:00.01 ?? 0:00.01 /usr/sbin/KernelEventAgent
0 38 1 0 0:00.01 ?? 0:00.01 /usr/libexec/hidd
Some notes from the ps man page…
and this one is very interesting:
The ps utility supports the Version 3 of the Single UNIX Specification (“SUSv3”) standard.
HISTORY
The ps command appeared in Version 4 AT&T UNIX.
BUGS
Since ps cannot run faster than the system and is run as any other scheduled process, the information it displays can never be exact.
The ps utility does not correctly display argument lists containing multibyte characters.
So if you want the output to have usernames in it, do a “ps -ej”
Another change is to the iostat command, the old iostat command mostly printed the disk io and User/Sys/Idle time. Looks like they have now added the load average to every line so it looks like this now:
disk0 disk1 cpu load average
KB/t tps MB/s KB/t tps MB/s us sy id 1m 5m 15m
24.95 85 2.08 22.38 65 1.42 16 14 70 0.86 1.14 1.35
49.14 154 7.39 33.47 251 8.20 17 26 58 0.86 1.14 1.35
93.75 110 10.06 59.62 148 8.61 17 20 64 0.86 1.14 1.35
38.05 191 7.09 35.92 241 8.44 18 30 51 0.95 1.15 1.35
53.78 190 9.97 38.98 272 10.34 20 28 52 0.95 1.15 1.35
Another command I found is “zfs”, but it does not appear any where in the gui. So I wonder if it is not fully implemented yet.
They also changed the sar command:
23:29:36 %usr %nice %sys %idle
23:29:37 34 0 42 24
23:29:38 35 0 44 21
23:29:39 24 0 30 46
23:29:40 17 0 22 60
23:29:41 16 0 21 64
23:29:42 19 0 22 59
23:29:43 26 0 30 44
23:29:45 32 0 42 25
23:29:46 28 0 34 38
23:29:47 25 0 31 44
Average: 25 0 31 42
They added a %nice column
First couple of hours with Leopard
Went and picked up MacOSX Leopard today… I decided to do a fresh install instead of trying to upgrade my current Tiger installation on my MacBook Pro. Well after backing up my entire hard drive to a external drive. I started the Installation. It took about an hour for it to install. The funny part is 30 minutes of it, was the installer verifying the integrity of of the DVD. First time I have seen an OS verify the entire disk before it started to even do an install to the hard drive. Anyways, 30 minutes after the verification was done, it was installed. The opening video is pretty cool basically flying through space. I then started the restoration of my files from the external USB Drive. Funny thing was as soon as I plugged the drive in to the MBP, time machine kicked in and asked if I wanted to use the external drive as a back up device. So I said yes and it started backing up what I had just installed while I was restoring files from the same drive.
Some little things I have noticed now:
- If you leave iCal on the Doc, it now shows the current date, unlike Tiger only showing it if you had it actually running.
- Everything seems a lot quicker than Tiger. But it could also be that I had not reinstalled Tiger since I had bought the MBP.
- Coverflow in finder. It is cool for going through my documents folder.
I also picked up the new iLife 08. I like the new iPhoto. Now to just get everything set back up the way I had it before.. So far I like what I see, and like the new speed..
MS Vista better than Mac OS X?
ThinGuy over at Sun linked to this article Windows Security – Bill Gates Attacks Mac Security, Apple Ads
Needless to say, I think Gates is just realizing that for once he may be in a losing position. Maybe for once there will not be a monopoly in the home OS front. I am also not recommending any one upgrade to vista, unless you plan on having one kick ass desktop to run it on, otherwise stick with XP or move to Mac, or Solaris!!!!


