Archive for February, 2006

Safari: Killing Safe Files

There’s been a lot of discussion this week about a serious Safari bug. Basically, it can be tricked into running a script automatically if its ‘Open “safe” files after downloading‘ setting is on. Shell scripts are not safe, but Safari can be tricked into thinking they are.

http://emperor.tidbits.com/webx?addBookmark@@.3c76e637

To check your systems if you can’t see Safari (over ssh, etc.), use:

defaults read com.apple.Safari AutoOpenSafeDownloads

If you get back 0 or false, you’re okay. If you need to turn it off, use:

defaults write com.apple.Safari AutoOpenSafeDownloads 0

Comments

VNC & ssh through NAT

I periodically need to help my father with his computer. Since he’s on DHCP behind an AirPort Extreme (which is getting its own IP via DHCP), this has been tricky. I recently found the solution.

Here’s what I sent to Dad:

  • Please go to System Preferences:Sharing:Services.
  • Make sure Apple Remote Desktop is checked.
  • Select Apple Remote Desktop.
  • Check Show status in menu bar.
  • Click on Access Privileges, and make sure VNC viewers may control screen with password: is checked.
  • Type your password into the text box.
  • Hit OK.
  • Repeat this on all your Macs.

Next time I need to access one of your Macs, paste the following into a Terminal window: “ssh -R 6900:127.0.0.1:5900 -R 6922:127.0.0.1:22 www.reppep.com“.

After this, I should be able to connect to your computer without any more futzing on your end.

Thanks to RimuHosting for the idea.

Comments (3)