Can YOU answer a question I've posed?

Details he-

http://al.howardknight.net/?ID=159764770000

TIA

On 17.08.20 9:09, David_B wrote:
Details he-

http://al.howardknight.net/?ID=159764770000

TIA

No.
No info?
Clickbait?
no way.

On 17/08/2020 09:11, Sjouke Burry wrote:
On 17.08.20 9:09, David_B wrote:
Details he-

http://al.howardknight.net/?ID=159764770000

TIA

No.
No info?
Clickbait?
no way.

Search for the MID yourself?

Message-ID:

David,

Search for the MID yourself?

Why ? Why haven't you just mentioned the newsgroup and subject (possibly
post date too). Why this "you must put effort into finding what I want to
show/tell you" game ?

And thats apart from the problem that Usenet doesn't support such
searching - you need to use a specific tools or website to be able to do
that, which not everyone has or knows about.

There must also be a reason why you think you should try to goad us with
your subjectline, and than may expect us to follow a link to a private
server - and not just post the question here.

You have not even tried to mention what the question is about or why it has
/not/ been posted here.

Sjouke mentioned clickbait. That is the same I thought - and even worse.
So, to use Sjouke's words : "No way."

Regards,
Rudy Wieser

P.s.
I found the message, and must say it sorely lacks info. You've given no
description of the purpose of those folders, nor what (kind of) files are in
it. You mention 'tick extra boxes', but are not telling us what those are
for. You did not even mention /which/ VPN product you where/are using.

Heck, it almost as if you /do not want/ to have us figure out what the
answer to your question is ...

Also, what you say sounds like you *can* uninstall everything by ticking
those extra boxes, but are now making a fuss about that it doesn't
completely remove itself when you do not tick them. Are you serious ?

On 17 Aug 2020, Sjouke Burry wrote
(in ) :

On 17.08.20 9:09, David_B wrote:
Details he-

http://al.howardknight.net/?ID=159764770000

TIA
No.
No info?
Clickbait?
no way.

He keeps doing this. He keeps getting similar results. He keeps not learning.
Why it’s almost as if he was a severely brain-damaged drunkard.

On 17 Aug 2020, R.Wieser wrote
(in article ):

David,

Search for the MID yourself?

Why ? Why haven't you just mentioned the newsgroup and subject (possibly
post date too). Why this "you must put effort into finding what I want to
show/tell you" game ?

And thats apart from the problem that Usenet doesn't support such
searching - you need to use a specific tools or website to be able to do
that, which not everyone has or knows about.

There must also be a reason why you think you should try to goad us with
your subjectline, and than may expect us to follow a link to a private
server - and not just post the question here.

You have not even tried to mention what the question is about or why it has
/not/ been posted here.

Sjouke mentioned clickbait. That is the same I thought - and even worse.
So, to use Sjouke's words : "No way."

Regards,
Rudy Wieser

P.s.
I found the message, and must say it sorely lacks info. You've given no
description of the purpose of those folders, nor what (kind of) files are in
it. You mention 'tick extra boxes', but are not telling us what those are
for. You did not even mention /which/ VPN product you where/are using.

Heck, it almost as if you /do not want/ to have us figure out what the
answer to your question is ...

Also, what you say sounds like you *can* uninstall everything by ticking
those extra boxes, but are now making a fuss about that it doesn't
completely remove itself when you do not tick them. Are you serious ?

he’s an idiot.

On 17/08/2020 09.09, David_B wrote:
Details he-

http://al.howardknight.net/?ID=159764770000

TIA

Newsgroups: alt.computer.workshop
From: David_B
Subject: Apple software uninstall

No. Offtopic.

--
Cheers, Carlos.

In article , R.Wieser
wrote:


Search for the MID yourself?

Why ? Why haven't you just mentioned the newsgroup and subject (possibly
post date too). Why this "you must put effort into finding what I want to
show/tell you" game ?

And thats apart from the problem that Usenet doesn't support such
searching - you need to use a specific tools or website to be able to do
that, which not everyone has or knows about.

There must also be a reason why you think you should try to goad us with
your subjectline, and than may expect us to follow a link to a private
server - and not just post the question here.

You have not even tried to mention what the question is about or why it has
/not/ been posted here.

Sjouke mentioned clickbait. That is the same I thought - and even worse.
So, to use Sjouke's words : "No way."

Regards,
Rudy Wieser

P.s.
I found the message, and must say it sorely lacks info. You've given no
description of the purpose of those folders, nor what (kind of) files are in
it. You mention 'tick extra boxes', but are not telling us what those are
for. You did not even mention /which/ VPN product you where/are using.

the link mentions which vpn product, not that it changes anything.

Heck, it almost as if you /do not want/ to have us figure out what the
answer to your question is ...

correct. he's simply trolling.

he didn't get an answer the first time he asked, so he's posting it to
an unrelated group. he does that a lot.

Also, what you say sounds like you *can* uninstall everything by ticking
those extra boxes, but are now making a fuss about that it doesn't
completely remove itself when you do not tick them. Are you serious ?

he's serious. he's really that stupid.

David_B wrote:
Details he-

http://al.howardknight.net/?ID=159764770000

TIA

"Alice follows him down the rabbit hole into Wonderland"

Removing a .dmg or an icon that causes a .dmg to open,
isn't the whole story. That's because, any "installer-like"
activity used to do "Ring0 activity", that's not covered.

Back when that application asked you to type in your password,
it was installing a service into the MacOSX. That part, I don't
see any mechanism how the contents would "vanish", based on the
..dmg disappearing. So your machine remains filled with little
bits of crap.

Now, for fun, I download Firefox for Mac, and hey ****z, that
has a service too. It has the Updater service, for updating
Firefox when new versions come in. And guess what ? Any method
(including on the Mozilla server) that discusses the removal
of Firefox, simply ignores the status of that service. So no
message of inspiration from the Mozilla folks on the topic.
Even if I try to follow advice for a popular program, I'm
given nuttin on this topic.

I had to visit a MacOSX malware removal article, to get a hint.

https://macsecurity.net/view/227-ado...date-mac-virus

/Library/LaunchAgents

"Examine the contents of the LaunchAgents folder for dubious-looking items"

~/Library/LaunchAgents

[Unlikely in this case - things launched for a particular user?]

/Library/LaunchDaemons

"try to pinpoint the files the malware is using for persistence"

Those are some suggestions of "wiring" in a sense.

I'm not advocating doing anything at the moment. At this point,
I'm looking for control knobs that might be useful.

I would be concerned that even the "App Remover" programs
don't go into that amount of detail when house cleaning.

https://macremover.com/uninstallguid...limited-macos/

That one discusses "Containers", and maybe that's part of some
newer version of the OS. Maybe a Container could be associated
with the Ring3 application, but what happens to driver level
content, like a .ko ?

This is where the old TN and Inside Mac used to help. You
could look some of this stuff up.

Paul

In article , Paul
wrote:

David_B wrote:
Details he-

http://al.howardknight.net/?ID=159764770000

TIA

"Alice follows him down the rabbit hole into Wonderland"

Removing a .dmg or an icon that causes a .dmg to open,
isn't the whole story. That's because, any "installer-like"
activity used to do "Ring0 activity", that's not covered.

stick with windows.

there is no 'ring0 activity' on a mac.

Back when that application asked you to type in your password,
it was installing a service into the MacOSX. That part, I don't
see any mechanism how the contents would "vanish", based on the
.dmg disappearing. So your machine remains filled with little
bits of crap.

providing an admin password does not mean installing a service.

Now, for fun, I download Firefox for Mac, and hey ****z, that
has a service too. It has the Updater service, for updating
Firefox when new versions come in. And guess what ? Any method
(including on the Mozilla server) that discusses the removal
of Firefox, simply ignores the status of that service. So no
message of inspiration from the Mozilla folks on the topic.
Even if I try to follow advice for a popular program, I'm
given nuttin on this topic.

removing firefox is simply drag it to the trash.

you also don't have a mac recent enough to run firefox in the first
place and poking around in whatever you downloaded isn't going to mean
much, especially when you don't know how the parts fit together.

I had to visit a MacOSX malware removal article, to get a hint.

https://macsecurity.net/view/227-ado...date-mac-virus

/Library/LaunchAgents

"Examine the contents of the LaunchAgents folder for dubious-looking
items"

~/Library/LaunchAgents

[Unlikely in this case - things launched for a particular user?]

/Library/LaunchDaemons

"try to pinpoint the files the malware is using for persistence"

Those are some suggestions of "wiring" in a sense.

not relevant.

I'm not advocating doing anything at the moment. At this point,
I'm looking for control knobs that might be useful.

you don't know where to even start looking.

I would be concerned that even the "App Remover" programs
don't go into that amount of detail when house cleaning.

app remover utilities are not needed and can cause problems.

people run them out of ignorance.

https://macremover.com/uninstallguid...limited-macos/

That one discusses "Containers", and maybe that's part of some
newer version of the OS. Maybe a Container could be associated
with the Ring3 application, but what happens to driver level
content, like a .ko ?

or maybe you have no idea what you're talking about.

also, macremover is dangerous. it's malware in disguise. why am i not
surprised you got caught in its seo.

This is where the old TN and Inside Mac used to help. You
could look some of this stuff up.

that's all online now, however, it's for software developers, not end
users.

nospam wrote:
In article , Paul
wrote:

David_B wrote:
Details he-

http://al.howardknight.net/?ID=159764770000

TIA
"Alice follows him down the rabbit hole into Wonderland"

Removing a .dmg or an icon that causes a .dmg to open,
isn't the whole story. That's because, any "installer-like"
activity used to do "Ring0 activity", that's not covered.

stick with windows.

there is no 'ring0 activity' on a mac.

I added .ko files to my Mac.

What ring do those run in ?

No, they don't run in Ring3.

That's what it took to get some storage
cards running. No installer.

Paul

In article , Paul
wrote:


there is no 'ring0 activity' on a mac.

I added .ko files to my Mac.

What ring do those run in ?

they don't run at all.

assuming you're referring to kernel extensions, they're kexts on a mac
and run in the kernel. this is also changing.

No, they don't run in Ring3.

there are no rings.

That's what it took to get some storage
cards running. No installer.

what storage cards were these, and on which mac?

nospam wrote:


there are no rings.

It's an Intel processor.

Don't let the article title offend you. Instead,
look at the figure on the right on the page.

https://en.wikipedia.org/wiki/Intel_Management_Engine

Of course your OS uses rings. It's part of the
Preemptive Multitasking OS model, and the need to
separate user processes (unprivileged) from
the kernel process (privileged).

Ring 3 is the least privileged, and that's where Firefox
or Terminal runs. They're not allowed to access IOSpace
or read/write hardware registers off some PCI BAR. Only something
in a more privileged Ring operates hardware. That's what
that diagram hints at. Ring 0 is a typical choice for
a privileged piece of code.

Firefox cannot reach into the SATA chip and using the
control/data registers, anonymously writing to the hard drive.
It's prevented from doing that. There'd be a SIGSEGV or similar
if you tried. It's because of these security features
that a Preemptive Multitasking modern OS "stays up so long".

Virtual Machine hosting software, can also use a Ring. It
does this, likely because no organized attempt has been
made by the major companies, to abuse the left-over Rings.
The Virtual Machine hosting does this, for some sort of
privilege division (if the VM host intercepts something,
it needs to be more privileged than the machine running
in Ring 3, but less privileged than the Host kernel
in Ring 0).

Paul

In article , Paul
wrote:

there are no rings.

It's an Intel processor.

it's a different os.

kernel extensions run in kernel space. app run in user space.

firefox is a userland app. it does not have nor need a kernel extension.

On 2020-08-17 2:46 p.m., nospam wrote:
In article , Paul
wrote:

there are no rings.

It's an Intel processor.

it's a different os.

kernel extensions run in kernel space. app run in user space.

firefox is a userland app. it does not have nor need a kernel extension.


Lets see if the universe is still running in the right direction.

Nospam, The Sky Is Blue!

Rene