Archive for the '' Category

On Mac OS X Viruses

Sunday, November 5th, 2006

I usually find the security-related smugness of Mac users rather jarring. What’s often even more jarring is the reasoning behind such smugness. That said, I have to say that the recent furor regarding the so called OSX.Macarena “virus” amounts to, well, bullshit. If anti-virus companies are pretending to “recognize the threat” and therefore attempting to [...]

Many Pieces of News

Monday, February 6th, 2006

Without any ado: The accompanying website ( of my forthcoming book (Mac OS X Internals) is up. Although the site is preliminary at the moment, it has useful information related to the book. In particular, a detailed table of contents is available for browsing. also has a blog, which will eventually cause this blog [...]


Thursday, November 10th, 2005

A quick FYI… it’s done.


Friday, October 28th, 2005

My apologies to all who have sent me emails that I couldn’t respond to — I am almost entirely off email for over a month. I hope to be able to say “done” in a matter of days now, if you know what I’m talking about. I know the motion sensor software doesn’t work on [...]

The ThinkPad Airbag Protection System (APS)

Tuesday, June 28th, 2005

Given the level of interest generated by the PowerBook motion sensor experiments ([1], [2]), this should be of interest to many: Mark Smith has published a document titled The ThinkPad APS Accelerometer Interface, which discusses the workings of the “Airbag” motion sensor in ThinkPad notebooks. This should be of particular use to those who are [...]

A Tour of the Mac OS X Kernel

Wednesday, June 22nd, 2005

A Tour of the Mac OS X Kernel is a flash conversion — and a minor edit — of a recent talk I gave at the NSA. Although I think the conversion is fine, since it allows the presentation to be “driven” within a web browser, it is far from being a visually faithful conversion. [...]

A File System Change Logger for "Tiger"

Tuesday, May 3rd, 2005

This is sort of rushed, since I’m traveling starting today, but I want to share a hopefully useful program for monitoring (in near real-time) file system activity on “Tiger”. The program, called “fslogger”, uses the same underlying mechanism as Spotlight to retrieve file system change information from the kernel. Here is the relevant discussion and [...]

HFSDebug Available for "Tiger"

Saturday, April 30th, 2005

I’ve just updated HFSDebug for Mac OS X 10.4 “Tiger”. I think this is a pretty exciting update, even for something as unexciting as a “debugger”. The following primary changes have happened: hfsdebug now understands and displays the on-disk raw structures corresponding to HFS Plus extended attributes. In particular, hfsdebug can process Access Control Lists [...]

Result and Report: The Mac OS X Expert Challenge 2005.1

Wednesday, April 13th, 2005

The result page for the Mac OS X Expert Challenge is live. Result and Report: The Mac OS X Expert Challenge 2005.1

The Mac OS X Expert Challenge 2005.1

Wednesday, April 6th, 2005

The challenge encompasses two partially overlapping areas of expertise: Operating System Internals Security My goals for this endeavor are the following: Probe popular interest in system-level Mac OS X topics. Knowledge of such interest is currently valuable to me as I am creating a book on such topics. Gauge the inquisitiveness and initiative of the [...]

All contents of this site, unless otherwise noted, are ©1994-2014 Amit Singh. All Rights Reserved.