‹ BackHN Continuity

Thread

Background Passive FTP with No GUI Control Survives Apple Store DFU

6 points · 7 comments · cududa

Loading the complete thread in the background. This saved snapshot is available now. Refresh

  1. lowmagnet · · focus · HN ↗
    Pasv is just a work around for nat'd connections.
  2. reanimus · · focus · HN ↗
    It's pretty easy to go online and understand what the "FTPPassive" key is (and why it's enabled by default). The firewall settings thing is a UI bug, if that. Those other toggles don't take effect when blocking all incoming connections is active. As such, it doesn't matter what the value for the other toggles is, so it resets them to the default (true). Perhaps a sharp point if you toggle firewall often, but not an outright security issue. My laptop has that systemuiserver preference setting there as well.

    I think this person is a bit paranoid and reading a bit too much into things judging from their timeline.

    1. cududa · · focus · HN ↗
      The firewall toggles flipping on and off immediately following a device firmware reset at the Apple Store shouldn’t happen.
      1. reanimus · · focus · HN ↗
        I'm not sure what you're saying here. I'm mainly pointing out that the UI toggles being counterintuitive don't change the semantics -- blocking all incoming connections blocks built-in and signed software from receiving connections too.
  3. sippingabonedry · · focus · HN ↗
    Schizo rant. God bless Apple retail employees who have to deal with this stuff because I could not, I would hand in my colored t-shirt on day 3.
    1. cududa · · focus · HN ↗
      I mean it’s normal to you when the GitHub desktop app shows an expired certificate and pops up”Always Accept” in place of “Never Accept”?
    2. ctoth · · focus · HN ↗
      It's one thing to have no compassion for someone who is clearly suffering. Hell nobody can be expected to have compassion all the time, right?

      But to make a point of how much you don't care. What, precisely, do you get out of this? I would like to understand. So I know what to avoid along my own journey if nothing else.

  4. ctoth · · focus · HN ↗

    [dead]

  5. hackernudes · · focus · HN ↗
    Rambling paranoid incoherent article. This person is either not technical at all or is having delusions.

    The only screenshot of an actual error is about "dsldevice.domain_not_set.invalid" which is apparently some crappy ATT fiber router thing when Internet is not up.

    There is no "background ftp" going on. Passive ftp is a way to do the FTP protocol and it makes sense to be on by default.

Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.