Please create an account to participate in the Slashdot moderation system

Understanding Mac OS X Kernel 57

Posted by timothy on Wednesday July 06, 2005 @05:00PM from the deep-in-the-heart-of-it dept.

An anonymous reader writes "Kernelthread.com has published a flash presentation overview of the Mac OS X kernel. Its title is 'A Tour of the Mac OS X Kernel' and it also covers Tiger features. Maybe interesting to note is that the slides are from a talk given to the NSA. Well, there is a nice security architecture diagram towards the end of the presentation."

This discussion has been archived. No new comments can be posted.

Understanding Mac OS X Kernel

Load All Comments

Search 57 Comments Log In/Create an Account

Comments Filter:

- Re:AES encryption under the hood? (Score:5, Informative)
  
  by zhiwenchong ( 155773 ) writes: on Wednesday July 06, 2005 @05:21PM (#12998419)
  
  Apparently not:
  http://en.wikipedia.org/wiki/AES#Security [wikipedia.org]
  
  Parent Share
  twitter facebook
- Re:AES encryption under the hood? (Score:1, Informative)
  
  by Anonymous Coward writes:
  
  You're wrong.
  
  Maybe you're thinking of the old DES standard.
  
  http://en.wikipedia.org/wiki/Data_Encryption_Stand ard [wikipedia.org]
- Re:AES encryption under the hood? (Score:3, Informative)
  
  by Anonymous Coward writes:
  
  FS and swap encryption is used to encrypt user's home directories. This is the "File Vault" functionality of OS X. Tiger adds the ability to optionally encrypt the users swap space also (only on file vaulted home folders) to secure the users memory space as well. A file vaulted home folder becomes a sparse disk image file (a disk image that can grow in size as it's written too) that uses the users account password to open. If the user losses their account password then the admin can use the master file vaul
amazing! (Score:3, Funny)

by Anonymous Coward writes: on Wednesday July 06, 2005 @05:13PM (#12998355)

A flash presentation that didn't turn my p4 into a 386!

Share
twitter facebook
- Re:amazing! (Score:5, Funny)
  
  by brilinux ( 255400 ) writes: on Wednesday July 06, 2005 @06:11PM (#12998775) Journal
  
  What, did it turn it into a G5?
  
  Parent Share
  twitter facebook
inside the kernel (Score:5, Funny)

by Anonymous Coward writes: on Wednesday July 06, 2005 @05:24PM (#12998447)

Does it give away the kernel's secret recipe?

Share
twitter facebook
- Re:inside the kernel (Score:3, Funny)
  
  by commodoresloat ( 172735 ) writes:
  
  Mmmm, kernel pancake....
- Re:inside the kernel (Score:3, Insightful)
  
  by green pizza ( 159161 ) writes:
  
  kernel's secret recipie
  You don't need 11 herbs and spices, that's for sure. "Seasoned Oven Fried Chicken" spiced with cheap McCormick Season-All Seasoned Salt [mccormick.com] from your local grocery store will give you almost the same flavor. As an added bonus, you can control exactly how much or how little grease you want! Take that, KFC!
Eek, a presentation in flash! (Score:3, Informative)

by Psychic Burrito ( 611532 ) writes: on Wednesday July 06, 2005 @05:38PM (#12998567)

There is no way to step back (at least I found none), to get an overview, to jump to a certain frame (like the mentioned security architecture diagram) - why do people make presentations in flash, instead of pdf or css (example [andybudd.com])?

Share
twitter facebook
- Keynote (Score:5, Informative)
  
  by TimmyDee ( 713324 ) writes: on Wednesday July 06, 2005 @05:56PM (#12998689) Homepage Journal
  
  I'm willing to bet it's in Flash because he did the presentation in Keynote. While the SWF export in Keynote isn't great, at least it preserves transitions, fonts, and other formatting options and doesn't look like shit (like the HTML export of another presentation software).
  
  Plus, it takes one step to export. I haven't seen anything that will do that with CSS.
  
  Parent Share
  twitter facebook
  - I wish it was PDF (Score:2)
    
    by green pizza ( 159161 ) writes:
    
    I'm willing to bet it's in Flash because he did the presentation in Keynote.
    Too bad he didn't export it to PDF. Keynote 2 (the version that ships in iWork 05) has an excellent PDF exporter.
    - Re:I wish it was PDF (Score:2)
      
      by jeblucas ( 560748 ) writes:
      
      Please read what OP said:
      
      While the SWF export in Keynote isn't great, at least it preserves transitions, fonts, and other formatting options...
      
      That's a fancy PDF that preserves transitions.
  - Re:Keynote (Score:2)
    
    by Val314 ( 219766 ) writes:
    
    PDF would be a better choice...
- Ctrl-Click or Right Click (Score:1)
  
  by josephtd ( 817237 ) writes:
  
  Gives you a popup when done in cinjuntgion with mouse over the presentation. At least it does in Safari.
  - Re:Ctrl-Click or Right Click (Score:2)
    
    by rthille ( 8526 ) writes:
    
    Yeah, I tried that. But selecting 'Back' from the resulting menu had no effect. (10.3.9, Safari 1.3 v312)
- Re:Eek, a presentation in flash! (Score:1)
  
  by macshome ( 818789 ) writes:
  
  Erm, right click > Back seemed to work for me.
  - Didn't work for me, though :-( (Safari 2, 10.4.1) (Score:2)
    
    by Psychic Burrito ( 611532 ) writes:
    
    Bummer :-(
Worthless filesystems. (Score:4, Funny)

by Given M. Sur ( 870067 ) writes: on Wednesday July 06, 2005 @05:57PM (#12998691)

So HFS+ can only support file sizes up to 8 exabytes. What a worthless filesystem.

Share
twitter facebook
- For explanatory purposes (Score:1, Informative)
  
  by Anonymous Coward writes:
  "Largest file size is 2^63 bytes"
  
  Pedantic note:
  
  2^63 bytes == 9007199254740992 KiB
  
  9007199254740992 KiB == 8796093022208 MB
  
  8796093022208 MB == 8589934592 GB
  
  8 exabytes == 8*(1,024*1,024*1,024) GB == 8*1073741824 GB == 8589934592 GB
  
  ____
  
  Now my head hurts
- Re:Worthless filesystems. (Score:5, Funny)
  
  by Chucker23N ( 661210 ) writes: <chucker23n+slashdot AT gmail DOT com> on Wednesday July 06, 2005 @07:34PM (#12999211) Homepage Journal
  
  And here I was, hoping HFS+ would provide the means to fit all my pr0n on it.
  
  Parent Share
  twitter facebook
  - Re:Worthless filesystems. (Score:1, Insightful)
    
    by Anonymous Coward writes:
    
    You must be one hell of a pornophile if your files are larger than 8,589,934,592 GB.
    - Re:Worthless filesystems. (Score:2)
      
      by Chucker23N ( 661210 ) writes:
      
      I have desires and wishes to be satisfied.
- Re:NSA deciding how to break into Mac computers? (Score:3, Informative)
  
  by noewun ( 591275 ) writes:
  
  Sorry to dint your tinfoil body suit, but the reason the NSA is interested in OS X is because they use OS X. I have a very interesting, very thorough PDF authored by the NSA (report #I331-009R-2004) on how to secure an OS X box, from install through end use. Very interesting, and I learned a bit.
- Re:NSA deciding how to break into Mac computers? (Score:2, Informative)
  
  by wirelessbuzzers ( 552513 ) writes:
  
  The NSA is not allowed to break US laws. Of course, they spy on other countries, so they're probably allowed to break other countries' laws.
  
  As for the other nasty stuff, it sounds an awful lot like your tinfoil hat is on too tight.
  
  Also, if you want to hack a computer, you probably care more about the services running on it than the guts of the kernel, at least up to the point where you install a rootkit. They probably care more because they want to use MacOS X in a highly secure environment. SEDarwin a
- Shocking ignorance of U.S. government activities (Score:2)
  
  by Futurepower(R) ( 558542 ) writes:
  
  It's shocking how ignorant people are of the activities of the U.S. government. Look at some of the other replies to the parent post.
  
  Most openly managed organizations have great difficulty staying on track. Secret organizations develop bad habits very quickly. In secret organizations, cover-ups become habit. Even the cover-ups themselves can be kept secret from other people in the same organization.
  
  Supposedly, U.S. spy agencies are not allowed to break U.S. laws. However, organizations that hire peopl
- Re:So, HFS+ can be case-sensitive... (Score:4, Informative)
  
  by ahknight ( 128958 ) * writes: on Thursday July 07, 2005 @07:07AM (#13001475)
  
  Like this: http://www.codepoetry.net/archives/2003/10/26/case sensitive_hfs_for_the_masses.php [codepoetry.net]
  
  Parent Share
  twitter facebook
- Re:So, HFS+ can be case-sensitive... (Score:2, Informative)
  
  by macshome ( 818789 ) writes:
  
  Just use diskutil on 10.3 or Disk Utility in the GUI on 10.4. Josh
Embedd C++ (Score:2)

by bhima ( 46039 ) writes:

I find it interesting that parts of the Kernel were written in Embedded C++. I haven't had the opportunity to use this although I'd love too. Anyone have an experience with EC++ they'd like to share?
- Re:Embedd C++ (Score:4, Interesting)
  
  by Nuuskis ( 686533 ) writes: on Thursday July 07, 2005 @05:25AM (#13001245)
  
  Embedded C++ is upwards compatible subset of ANSI Standard C++. So if you have written very simple C++, for example when coming from C and making your first C++ program, you probably "used" EC++. It is just C++ without namespaces, templates, exceptions, RTTI (Runtime Type Identification), STL (Standard Template Library), and some other stuff that might make executable noticeably bigger and cause unwanted memory consumption.
  
  Parent Share
  twitter facebook
* Encrypted swap (optional, uses AES) (Score:2)

by VValdo ( 10446 ) writes:

Wow.. So it looks like they finally fixed this security bug where the password could be discovered in the swap. Anyone know how to turn this feature on? (don't have Tiger yet & a quick Google search turns up nothing)

In the same vein, I recall OS X versions up to jaguar had weakly-hashed user passwords in a SAMBA directory somewhere. If I'm remembering correctly, can someone verify that this is no longer the case in Tiger?

W
- Re:* Encrypted swap (optional, uses AES) (Score:5, Informative)
  
  by kerry-buckley ( 647774 ) writes: on Thursday July 07, 2005 @04:19AM (#13001134)
  
  Wow.. So it looks like they finally fixed this security bug where the password could be discovered in the swap. Anyone know how to turn this feature on?
  
  There's a "use secure virtual memory" checkbox in the security preference pane.
  
  Parent Share
  twitter facebook
- Re:* Encrypted swap (optional, uses AES) (Score:2, Insightful)
  
  by 68kmac ( 471061 ) writes:
  
  It's an option in the "Security" panel of the System Preferences.
- Re:* Encrypted swap (optional, uses AES) (Score:1)
  
  by macshome ( 818789 ) writes:
  
  You turn on encrypted swap in the Security prefs. I know of some people doing netboot with encrypted local swap for security.
  
  Hashing is now selective again. If you don't need SMB access for an account it won't make the NTLM hash.
- Re:Bad SWF file? (Score:2)
  
  by cide1 ( 126814 ) writes:
  
  I got that under firefox, it works fine in IE
  - Re:Bad SWF file? (Score:1)
    
    by BrianPan ( 786919 ) writes:
    
    Looks ok in Opera on Windows, too.
- Re:Bad SWF file? (Score:2)
  
  by aristotle-dude ( 626586 ) writes:
  
  Maybe you have Flashplayer 6 installed instead of Flashplayer 7?
Flash under Windows (Score:2)

by koehn ( 575405 ) * writes:

I take it nobody with a Windows box even tried to view the presentation. All of the space characters are rendered as "x20", which makes it a bit tough (nee impossible) to read.
- Re:Flash under Windows (Score:2)
  
  by Gulthek ( 12570 ) writes:
  
  Not here at work: Windows XP on a stock IBM. The presentation ran fine.
  - Re:Flash under Windows (Score:2)
    
    by koehn ( 575405 ) * writes:
    
    Weird. I'm running XP SP2 on a stock HP, and no such luck. Guess I'll try it from my Mac when I get home.
- Re:Flash under Windows (Score:2)
  
  by BiOFH ( 267622 ) writes:
  
  Well, that?s unfair. I mean it?s not like Mac users have had to put up with anything similar from Window?s non : standard character set choices. ;)
  - Re:Flash under Windows (Score:2)
    
    by koehn ( 575405 ) * writes:
    
    The space character (0x20) is the same on both platforms, however. At least MacOS X switched to a more "standard" line terminator (\r\n), however inferior I might feel it is to it's MacOS = 9 equivalent (\r).
    
    Character encoding is truly a bane of modern software. It's kind of like Y2K, but it keeps going on forever, since nobody is going to bother switching legacy systems to support Unicode (and even then, you have multiple choices for encoding).
- Re:Flash under Windows (Score:2)
  
  by mollymoo ( 202721 ) writes:
  
  All good here on Win2k w. Firefox & Flash7.

There may be more comments in this discussion. Without JavaScript enabled, you might want to turn on Classic Discussion System in your preferences instead.

Re:AES encryption under the hood? (Score:5, Informative)

Re:AES encryption under the hood? (Score:1, Informative)

Re:AES encryption under the hood? (Score:3, Informative)

amazing! (Score:3, Funny)

Re:amazing! (Score:5, Funny)

inside the kernel (Score:5, Funny)

Re:inside the kernel (Score:3, Funny)

Re:inside the kernel (Score:3, Insightful)

Eek, a presentation in flash! (Score:3, Informative)

Keynote (Score:5, Informative)

I wish it was PDF (Score:2)

Re:I wish it was PDF (Score:2)

Re:Keynote (Score:2)

Ctrl-Click or Right Click (Score:1)

Re:Ctrl-Click or Right Click (Score:2)

Re:Eek, a presentation in flash! (Score:1)

Didn't work for me, though :-( (Safari 2, 10.4.1) (Score:2)

Worthless filesystems. (Score:4, Funny)

For explanatory purposes (Score:1, Informative)

Re:Worthless filesystems. (Score:5, Funny)

Re:Worthless filesystems. (Score:1, Insightful)

Re:Worthless filesystems. (Score:2)

Re:NSA deciding how to break into Mac computers? (Score:3, Informative)

Re:NSA deciding how to break into Mac computers? (Score:2, Informative)

Shocking ignorance of U.S. government activities (Score:2)

Re:So, HFS+ can be case-sensitive... (Score:4, Informative)

Re:So, HFS+ can be case-sensitive... (Score:2, Informative)

Embedd C++ (Score:2)

Re:Embedd C++ (Score:4, Interesting)

* Encrypted swap (optional, uses AES) (Score:2)

Re:* Encrypted swap (optional, uses AES) (Score:5, Informative)

Re:* Encrypted swap (optional, uses AES) (Score:2, Insightful)

Re:* Encrypted swap (optional, uses AES) (Score:1)

Re:Bad SWF file? (Score:2)

Re:Bad SWF file? (Score:1)

Re:Bad SWF file? (Score:2)

Flash under Windows (Score:2)

Re:Flash under Windows (Score:2)

Re:Flash under Windows (Score:2)

Re:Flash under Windows (Score:2)

Re:Flash under Windows (Score:2)

Re:Flash under Windows (Score:2)

Related Links Top of the: day, week, month.

Slashdot Top Deals