• Joined on 2025-07-20
michael commented on issue usnistgov/macos_security#131 2026-01-19 18:29:21 +00:00
Add requirement to review exemptions to smart card login.

@robertgendler commented on GitHub:

@akegerreis do you have a suggestion on how this should appear in the project?

A note in supplemental where unmapped users is talked about? A separate rule?

michael commented on issue usnistgov/macos_security#131 2026-01-19 18:29:21 +00:00
Add requirement to review exemptions to smart card login.

@akegerreis commented on GitHub:

@robertgendler we have this slated to go into the supplemental for our April release of the STIG.

michael commented on issue usnistgov/macos_security#132 2026-01-19 18:29:21 +00:00
safariAllowPopups doesn't work in Sonoma (and possibly earlier versions)

@isaacatmann commented on GitHub:

Update better detection

Detection:

sqlite3 ~/Library/Safari/PerSitePreferences.db 'select default_value from default_preferences WHERE preference="PerSit…
michael commented on issue usnistgov/macos_security#132 2026-01-19 18:29:21 +00:00
safariAllowPopups doesn't work in Sonoma (and possibly earlier versions)

@jmahlman commented on GitHub:

CIS has updated the guidance for this rule and moved it to a manual audit. Since the config profile does not work, we have removed the rule from the Sequoia branch…

michael commented on issue usnistgov/macos_security#132 2026-01-19 18:29:21 +00:00
safariAllowPopups doesn't work in Sonoma (and possibly earlier versions)

@robertgendler commented on GitHub:

Sorry it took a while to come around to this.

Testing with macOS 14.5 and the profile installed and testing your website. It is blocking popups for me. Now…

michael commented on issue usnistgov/macos_security#132 2026-01-19 18:29:21 +00:00
safariAllowPopups doesn't work in Sonoma (and possibly earlier versions)

@isaacatmann commented on GitHub:

Update, resolution is as follows:

michael opened issue usnistgov/macos_security#133 2026-01-19 18:29:21 +00:00
Different payload type for system_settings_screensaver_timeout_enforce
michael opened issue usnistgov/macos_security#135 2026-01-19 18:29:21 +00:00
Remove multiple NTP servers from system_settings_time_server_configure.yaml
michael commented on issue dutchcoders/transfer.sh#189 2026-01-19 18:29:21 +00:00
activating http basic auth

@paolafrancesca commented on GitHub:

hello @sicenul you have to set the following two ENV variables: HTTP_AUTH_USER, HTTP_AUTH_PASS https://github.com/dutchcoders/transfer.sh/blob/master/c…

michael commented on issue dutchcoders/transfer.sh#187 2026-01-19 18:29:21 +00:00
Add option to disable inline handler

@paolafrancesca commented on GitHub:

fixed with #347

michael commented on issue dutchcoders/transfer.sh#189 2026-01-19 18:29:21 +00:00
activating http basic auth

@sicenul commented on GitHub:

great it work, thanks for your fast response.

michael commented on issue dutchcoders/transfer.sh#187 2026-01-19 18:29:21 +00:00
Add option to disable inline handler

@stek29 commented on GitHub:

@aspacca your solution seems good enough (.Contains html) I’d still prefer to have an option to disable inline handler completely tbh, but yeah, it’s good enough

michael commented on issue dutchcoders/transfer.sh#188 2026-01-19 18:29:21 +00:00
Print new line in transfer.sh

@stefanbenten commented on GitHub:

@JustAnotherArchivist Did you see the example alias/function for the linux terminal? That would essentially be what you want for manual usage. Please correct me…

michael commented on issue dutchcoders/transfer.sh#188 2026-01-19 18:29:21 +00:00
Print new line in transfer.sh

@soulofmischief commented on GitHub:

@aspacca https://github.com/dutchcoders/transfer.sh-web/pull/35

michael commented on issue dutchcoders/transfer.sh#188 2026-01-19 18:29:21 +00:00
Print new line in transfer.sh

@JustAnotherArchivist commented on GitHub:

This would certainly be useful for manual terminal usage with e.g. curl. I've long had a little script that essentially does `curl --upload-file ...;…

michael commented on issue dutchcoders/transfer.sh#188 2026-01-19 18:29:21 +00:00
Print new line in transfer.sh

@stefanbenten commented on GitHub:

We could simply handle this with an additional header. The usages that i know of, prefer the current version, for ease of automation.

michael commented on issue dutchcoders/transfer.sh#188 2026-01-19 18:29:21 +00:00
Print new line in transfer.sh

@paolafrancesca commented on GitHub:

@soulofmischief can you please refer to the file and line of code that has to be changed from the frontend repo: https://github.com/dutchcoders/transfer.sh-web…

michael closed issue usnistgov/macos_security#134 2026-01-19 18:29:21 +00:00
system_settings_apple_watch_unlock_disable & system_settings_touchid_unlock_disable should not be mapped to AC-11
michael closed issue usnistgov/macos_security#135 2026-01-19 18:29:21 +00:00
Remove multiple NTP servers from system_settings_time_server_configure.yaml
michael commented on issue dutchcoders/transfer.sh#187 2026-01-19 18:29:21 +00:00
Add option to disable inline handler

@paolafrancesca commented on GitHub:

@stek29 https://github.com/dutchcoders/transfer.sh/pull/355 what do you think?

I also reduced sanitzation to inline content disposition: ie, when you…