macOS High Sierra 10.13.3 still leaks encryption passwords in plain text

Thank goodness that Howard Oakley and friends are staying on top of APFS bugs and security issues:

If you have erased an existing unencrypted APFS volume to change it into an encrypted APFS volume in the last 20 days or so, then you can be certain that the passphrase to that encrypted volume is stored in your unified log, and accessible to anyone who can access your Mac as an admin user (or when an admin user is logged on).

Just like the last security problem, the actual APFS format is not the problem, a Disk Utility bug is. Hopefully Apple will fix this ASAP.

Is APFS fully supported yet?

Nobody covers APFS better than Howard Oakley:

So, as of High Sierra 10.13.3, APFS is the standard file system for SSDs which are only used by High Sierra systems, “can” be used on hard disks which are only used by High Sierra systems, but remains unsupported on Fusion Drives.

There are four major limitations to the use of APFS.

Essential reading.

Is macOS High Sierra Apple’s Vista?

Apple Vista

macOS High Sierra was supposed to be another MacOS X Snow Leopard, a polished release of refinements and fixes. Instead we have APFS features gone AWOL, a whoopee cushion level security gaffe, oh and High Sierra updates take forever on Fusion drive iMacs.

And now Apple Insider offers How to downgrade from macOS High Sierra to Sierra advice.

Somehow I don’ t think this is what Apple intended for High Sierra. Thank god Howard Oakley is keeping score for us.

Using APFS in High Sierra

Howard Oakley takes stock of APFS in High Sierra both good and not so good. If you have the slightest interest in APFS read his posts. The quick summary is that if your Mac boots from a SSD, you can reap the Clone and Snapshot feature benefits of APFS which can be substantial.

If your Mac boots from a Fusion Drive or hard disk, you are in limbo because Apple has not completed APFS Fusion Drive/HD support.  Oakley warns of potential, “adverse effects of copy-on-write, perhaps the single most important technology behind APFS” on hard disk media and concludes

you can see why the performance of APFS on rotating disks is far inferior to that of HFS+. That is, though, something of a worst case.

But there is more. APFS brings yet more changes to basic Finder behaviors.

Apple has made Finder’s simple human interface progressively more complex. Originally:

  • Dragging an item from one folder to another on the same volume moved it; to copy you Option-dragged.
  • Dragging an item from one volume to another copied it.

Children of all ages, myself included, have found those principles clean and simple, and quite fail-safe.

Now, rules have become:

  • Dragging an item from one folder to another on the same volume moves it.
  • To make a copy (not clone) on an HFS+ volume, Option-drag to another location.
  • To make a clone (not copy) on an APFS volume, Option-drag to another location, but I can’t see how to make a true copy.
  • Dragging an item from one volume to another copies it, unless either of the volumes is on iCloud Drive, in which case it moves it.
  • To make a copy (not clone) to or from iCloud Drive, use Option-drag instead.

Messy.

I agree with Oakley’s final summary that we’ll have to wait and find out how serious Apple’s commitment to macOS really is. High Sierra is not turning out to be the next Snow Leopard. Not by a long shot. Will macOS remain a serious platform or become an iPhone accessory?

egword Universal 2.1 Open Alpha v304

fullsizeoutput_8719

Monokakido‘s Hirose san is busy cranking out egword Universal 2.1 updates with new versions coming every few days, now up to v304.

It’s a great tool for beautiful Japanese vertical text layout. My only wish is for an iOS iPad version with robust iCloud Drive support so I can easily move from device to device. I’m pretty sure Hirose san is planning to add that as soon as he can.

Give it a test if you have time and send feedback.