<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Rubber Ducky on Melabit</title>
    <link>https://static.233.196.69.159.clients.your-server.de/en/tags/rubber-ducky/</link>
    <description>Recent content in Rubber Ducky on Melabit</description>
    <generator>Hugo</generator>
    <language>en</language>
    <lastBuildDate>Thu, 14 Nov 2024 06:00:00 +0000</lastBuildDate>
    <atom:link href="https://static.233.196.69.159.clients.your-server.de/en/tags/rubber-ducky/index.xml" rel="self" type="application/rss+xml" />
    <item>
      <title>Apple, we have a problem: a new macOS Sonoma bug</title>
      <link>https://static.233.196.69.159.clients.your-server.de/en/2024/11/14/apple-we-have-a-problem-a-new-macos-sonoma-bug/</link>
      <pubDate>Thu, 14 Nov 2024 06:00:00 +0000</pubDate>
      <guid>https://static.233.196.69.159.clients.your-server.de/en/2024/11/14/apple-we-have-a-problem-a-new-macos-sonoma-bug/</guid>
      <description>&lt;p&gt;&lt;img src=&#34;https://static.233.196.69.159.clients.your-server.de/img/2024-11-14-apple-abbiamo-un-altro-problema-un-nuovo-baco-di-macos-sonoma/sonoma-new-bugs.jpeg&#34; alt=&#34;&#34;&gt;&#xA;&amp;ndash; &lt;em&gt;Image generated by &lt;a href=&#34;https://designer.microsoft.com/image-creator&#34;&gt;Microsoft Designer&lt;/a&gt; AI.&lt;/em&gt;&lt;/p&gt;&#xA;&lt;p&gt;Sonoma’s bugs never fail to surprise, and here I describe a fresh one, which luckily has been fixed in Sequoia.&lt;/p&gt;&#xA;&lt;p&gt;Take a new MacBook Air or Pro, where you’ve just installed Sonoma, or a MacBook where you erased the startup disk before installing Sonoma (what happens when simply updating from a previous version might be different).&lt;/p&gt;&#xA;&lt;p&gt;Try inserting a USB stick or external USB drive (or even an SD card, when available). What you’ll see is this:&lt;/p&gt;&#xA;&lt;div style=&#34;position: relative; padding-bottom: 56.25%; height: 0; overflow: hidden;&#34;&gt;&#xA;      &lt;iframe allow=&#34;accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share&#34; allowfullscreen=&#34;allowfullscreen&#34; loading=&#34;eager&#34; referrerpolicy=&#34;strict-origin-when-cross-origin&#34; src=&#34;https://www.youtube.com/embed/GvHlNf3Gtcc?autoplay=0&amp;amp;controls=1&amp;amp;end=0&amp;amp;loop=0&amp;amp;mute=0&amp;amp;start=0&#34; style=&#34;position: absolute; top: 0; left: 0; width: 100%; height: 100%; border:0;&#34; title=&#34;YouTube video&#34;&gt;&lt;/iframe&gt;&#xA;    &lt;/div&gt;&#xA;&#xA;&lt;p&gt;That is, you’ll see practically nothing, even in slow motion.&lt;/p&gt;&#xA;&lt;p&gt;In theory, macOS should display a pop-up window asking the user whether they want to allow the connection of the &lt;em&gt;USB accessory&lt;/em&gt; (as Apple calls it) to the Mac. The problem is, as shown in the video, the pop-up disappears faster than a Formula 1 car.&lt;/p&gt;&#xA;&lt;p&gt;I must say that the first few times this happened, I didn’t even see it. Only after several unsuccessful and increasingly frustrating attempts, a very quick shadow on the screen made me suspect an overly zealous disappearing window.&lt;/p&gt;&#xA;&lt;p&gt;This bug occurs with macOS Sonoma 14.6; I have no idea if previous versions are affected. To work around the issue, you need to go to &lt;strong&gt;System Settings&lt;/strong&gt; under &lt;strong&gt;Privacy &amp;amp; Security&lt;/strong&gt; and change the &lt;code&gt;Allow accessory connections&lt;/code&gt; option from &lt;code&gt;Ask Every Time&lt;/code&gt;, or &lt;code&gt;Ask for New Accessories&lt;/code&gt;, to &lt;code&gt;Always&lt;/code&gt;.&lt;/p&gt;&#xA;&lt;img src=&#34;https://static.233.196.69.159.clients.your-server.de/img/2024-11-14-apple-abbiamo-un-altro-problema-un-nuovo-baco-di-macos-sonoma/macos-sonoma-accessory-bug.png&#34; alt=&#34;&#34;&gt;&lt;p&gt;Once the USB drive is connected, for added security, you can return to selecting the &lt;code&gt;Ask for New Accessories&lt;/code&gt; option—just remember to repeat the procedure every time you insert a new USB stick (or external drive).&lt;/p&gt;&#xA;&lt;hr style = &#34;border: none; &#xA;            border-top: 3px double #333; &#xA;            color: #333; &#xA;            overflow: visible; &#xA;            height: 5px; &#xA;            width: 50%; &#xA;            margin-left: auto; &#xA;            margin-right: auto;&#34;&#xA;&gt;&#xA;&#xA;&lt;p&gt;At first glance, it seems strange that the consent request for connecting new accessories only appears on MacBooks and not on desktop Macs.&lt;/p&gt;&#xA;&lt;p&gt;But thinking about it, it makes sense. I don’t believe macOS developers want to prevent us from connecting our own USB drives or those of people we know. Instead, I think they want to prevent someone from surreptitiously inserting a &lt;a href=&#34;https://www.youtube.com/watch?v=e_f9p-_JWZw&#34;&gt;&lt;em&gt;malicious USB stick&lt;/em&gt;&lt;/a&gt; (also known as a &lt;a href=&#34;https://shop.hak5.org/products/usb-rubber-ducky?variant=353378649&#34;&gt;Rubber Ducky&lt;/a&gt;), which can now even be made at home with a low-cost &lt;a href=&#34;https://github.com/dbisu/pico-ducky&#34;&gt;Raspberry Pi Pico&lt;/a&gt;.&lt;/p&gt;&#xA;&lt;p&gt;These sticks are programmable and can cause serious damage to a computer, from automatically transferring sensitive files onto the stick,&lt;sup id=&#34;fnref:1&#34;&gt;&lt;a href=&#34;#fn:1&#34; class=&#34;footnote-ref&#34; role=&#34;doc-noteref&#34;&gt;1&lt;/a&gt;&lt;/sup&gt; to erasing—if the programmer has the admin account password—the entire system disk.&lt;/p&gt;&#xA;&lt;p&gt;It goes without saying that such an attack is more likely to happen on a MacBook, often left unattended, rather than on a desktop computer, which remains in more controlled environments like home or the office.&lt;/p&gt;&#xA;&lt;p&gt;Including this type of security check in the operating system is therefore a great idea; what’s terrible is how it’s implemented in macOS Sonoma.&lt;/p&gt;&#xA;&lt;p&gt;The good news is that in macOS Sequoia, the bug has been fixed, and the pop-up remains clearly visible on the screen until the user makes a choice.&lt;/p&gt;&#xA;&lt;hr style = &#34;border: none; &#xA;            border-top: 3px double #333; &#xA;            color: #333; &#xA;            overflow: visible; &#xA;            height: 5px; &#xA;            width: 50%; &#xA;            margin-left: auto; &#xA;            margin-right: auto;&#34;&#xA;&gt;&#xA;&#xA;&lt;p&gt;For those interested in my saga on macOS Sonoma bugs (and more), here are links to previous posts:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;&#xA;&lt;p&gt;&lt;a href=&#34;https://melabit.com/en/2024/02/12/apple-we-have-a-problem-a-look-at-macos-sonoma-bugs/&#34;&gt;Apple abbiamo un problema: uno sguardo ai bachi di macOS Sonoma&lt;/a&gt;&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&#xA;&lt;p&gt;&lt;a href=&#34;https://melabit.com/en/2024/02/26/sonoma-there-is-some-good-around/&#34;&gt;Sonoma: c’è del buono&lt;/a&gt;&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;li&gt;&#xA;&lt;p&gt;&lt;a href=&#34;https://melabit.com/en/2024/05/31/apple-we-have-a-problem-a-look-at-macos-sonoma-bugs-update/&#34;&gt;Apple abbiamo un problema: uno sguardo ai bachi di macOS Sonoma (aggiornamento)&lt;/a&gt;&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;div class=&#34;footnotes&#34; role=&#34;doc-endnotes&#34;&gt;&#xA;&lt;hr&gt;&#xA;&lt;ol&gt;&#xA;&lt;li id=&#34;fn:1&#34;&gt;&#xA;&lt;p&gt;It’s not just stealth aircraft designers at risk of this happening, as it could just as easily involve documents from a divorce case or a financial dispute.&amp;#160;&lt;a href=&#34;#fnref:1&#34; class=&#34;footnote-backref&#34; role=&#34;doc-backlink&#34;&gt;&amp;#x21a9;&amp;#xfe0e;&lt;/a&gt;&lt;/p&gt;&#xA;&lt;/li&gt;&#xA;&lt;/ol&gt;&#xA;&lt;/div&gt;&#xA;</description>
    </item>
  </channel>
</rss>
