Have I been hacked?

Thanks Doug.
I don't open links in email. In fact, I get a few hundred smam a week, so I only use webmail, and only open mail from people I absolutely trust with my life!! My password is good, and I've never given it out knowingly, unless that typed stream thing is sending it out. I change it often. I'm the sole user on this computer. I don't chat online, play online games, download music or porn, or any of the usual risky stuff. But some things are just strange.
For example, in usr/share/doc/postfix--
all of the files end with README except INSTALL , OVERVIEW and RELEASE_NOTES
Each file begins with something similar.
PPoossttffiixx IInnssttaallllaattiioonn FFrroomm SSoouurrccee CCooddeePPoossttffiixx DDooccuummeennttaattiioonn
WWhhaatt yyoouu nneeeedd ttoo kknnooww aabboouutt PPoossttffiixx llooggggiinngg
PPoossttffiixx BBuuiilltt--iinn CCoonntteenntt IInnssppeeccttiioonn
...you get the idea.
Is this normal?

Why does usr/share/emacs/21.2/etc have a file named COOKIES, that is really a recipe for cookies? It includes this email address--
From: ucdavis!lll-lcc!hplabs!parcvax!bane@ucbvax.berkeley.edu (John R. Bane)
And in usr/share/emacs/21.2/etc another name JOKES, with a bunch of dumb jokes with this email address--
From: Don Chiasson <G.CHIASSON@DREA-XX.ARPA>
Subject: Some gnu jokes
To: jokes@DREA-XX.ARPA, gergely@DREA-XX.ARPA, broome@DREA-XX.ARPA
cc: G.CHIASSON@DREA-XX.ARPA
Message-ID: <12329394624.13.G.CHIASSON@DREA-XX.ARPA>

I've got at least a hundred more files that have strange kinda hidden things that just don't follow the rule of--
It makes SENSE to include this file, and use up VALUABLE space!

I hope I'm not using up your valuable time and space with my paranoia!

I would love your input!!

ps. most of the names of the strange files are ALL UPPER CASE, if that means anything.
 
Great!!
I just found another one-- Firefox had a user profile that isn't me!

I installed Firefox last night because I couldn't get XMRadio to work with Safari.

Firefox/Profiles/Erikdl5k.default with a 32.9 MB cache. Doesn't even show my profile!

And I only used Firefox long enough to find out that I didn't like it! Apparently Erik did!
 
mazzy said:
... Firefox had a user profile that isn't me!

Firefox/Profiles/Erikdl5k.default with a 32.9 MB cache. Doesn't even show my profile!
And I only used Firefox long enough to find out that I didn't like it! Apparently Erik did!
Click to expand...

FireFox randomly names the profile, and seeing your name there would just be a pure coincidence. You can always rename that profile folder. The name is not Erik, it's Erikdl5k. My FireFox profile has the name default.Zoy. It's just random. Camino (another Mozilla web browser) does not use profiles at all, and you may find it more to your liking.

The various readme files are internal emacs files. Help files, sample files, etc. which most any word processor/editor will have similar files, and emacs is the unix text editor that you could also use. It's provided with your system.
You can open those readme files with TextEdit, so you can read the text clearly.
 
Thanks for explaining the Erik profile. I did open the emacs files with TextEdit, and that is how the files read. I don't understand the strange string of letters....PPoossttffiixx, etc. And why the cookie recipe and jokes?
 
LOL, HUH!
symphonix said:
I'm not sure I understand that. If you're referring to the "Network" icon that comes up under "Computer" then that is normal and appears regardless of whether you are connected to a network or not. As for servers, what are you seeing that makes you think you "have a server installed". Mac OS X (not server) comes with several servers installed that can be switched on easily through the Sharing preference panel. And as for "certain files on the web" can you give us a bit more info?
Click to expand...
 
Macs are hack proof, dont worry, if your stuff's so important make backup's but I have a 7 year old G3 running osx with no problems ever!

Please stop worrying just relex, sit down and play on your mac.
If you realy want to feel safe Turn your firewall on on your router and your mac, But you realy dont need it.

Thats excactly what I was like when I switched, I was scared of it but, dont be
 
Well since we are in MY DOMAIN here is OS X security for the SUPER PARANOID lesson number two (my first lesson is on the first page).

Now for most any home user I am going to list the simple steps to getting a level that will be good for 99.8% of most any internet hack coming down the pipe by script kiddies.

1. Create a new "User" account (not another Administrator account) and use that account. When the new account asks for a password, use a password that is not a common word, has at least 8 characters, do not make it a common word, include uncommon characters.

2. Open System Preferences->Sharing and click the Firewall on. Once you do that click on the "Advanced..." button. Once the style sheet comes down put check marks in all three boxes.

3. Download an excellent Outgoing firewall called Little Snitch and buy it use it. It will monitor every outgoing signal and this will stop any signals going out of your computer.

4. Download Paranoid Android because it will check all programs launching are what they are suppose to be, not on what they appear to the eye.

5. In the Finder open the Finder's Preferences. Then click on the "Advanced" button and "Show all file extensions". This will make all programs to show what kind of program it is.

7. Buy and use a router with your ISP connection. Just make sure you buy a router that has firewall functions and also does firewall logging. Never connect to the net totally naked (computer wise).

8. Download a virus checker like the free ClamXav. Just to be safe in case the virus, trojan horse comes down the pike. Also you can stop yourself from sending along Windows viruses to/from your Windows using friends. Just be warned, third party developers and virus checking programs have had a shaky time because OS X is a radically changing operating system and third party developers take time to keep catch up. Just remember this when updating OS X.

9. Open Safari and open Safari's Preferences. In the General Tab uncheck "Open "safe" files...". This will stop the automatic opening of downloaded files. This is just a smart thing to do.

In my first paragraph I said keeping safe from script kiddies. I say this because I believe if someone really wants to get into you computer, they will. Security is not a goal, it is a continuing state of mind. Remember that let it burn into your mind.

Lastly learn about the inner working of you Mac. You should start by reading books from O'Reilly Press like Switching to the Mac: The Missing Manual, Tiger Edition and Mac OS X Tiger for Unix Geeks, Third Edition.

So this is just a little taste in what a typical Mac user should do to keep relatively secure in the MacWorld. To stay secure you must never rest on your state of security. Always keep on top of the cutting edge and even really good Window admins can even keep their Windows computer safe.
 
Than you Satcomer. I downloaded Little Snitch, and these are the default settings....

Any Application Allow TCP to 0.0.0.0 - 0.0.0.255
Any Application Allow UDP to 0.0.0.0 - 0.0.0.255
Any Application Allow any connection to 244.0.0.0 - 239.255.255.255
Any Application Allow TCP to port 548 (apvovertcp) at 254.0.0.0 - 254.255.255.255
Any Application Allow any connection to your local network
Any Application Allow any connection to broadcast addresses
configd Allow IPV6-ICMP connections
host Allow UDP connection to port 53 (domain)
lookupd Allow any connection
Mail Allow any TCP connections
mDNSResponder Allow UDP connections
natd Allow DIVERT to 0.0.0.0
nmblookup Allow UDP connections to port 137 (netbios-ns)
nslookup Allow UDP connections
ntpd Deny UDP connections to port 2000 (callbook)
ntpd Allow UDP connections to port 123 (ntp)
ntpdate Allow UDP connections to port 123 (ntp)
QuickTime Player Allow TCP connections to port 554 (rtsp)
QuickTime Player Allow TCP connections to port 80 (https)
Safari Allow TCP connections to port 443 (http)
Safari Allow TCP connections to port 80 (http)
Sherlock Allow TCP connections to port 80 (http)
slpd Deny any connection
slpd Allow UDP to your local network
SyndicationAgent Allow TCP connections to port 80 (http)
SystemUIServer Allow UDP to port 10.0.0.0 - 10.0.15.255
Whois Allow TCP connections to port 43 (nicname)

Can you tell me which of these settings need to be changed? I've tried blocking the UDP ports, but they come back on. Little Snitch will show both allow and deny eg
mDNSResponder Allow UDP connections
mDNSResponder Deny UDP connections


After installing ClamXav, I got the message --
freshclam wants to connect to dns-cac-16-01.texas.rr.com on UDP port 53 (domain)
and freshclam wants to connect to badfish.securityminded.net (209.8.40.140) on TCP port 80 (http)
The installer log shows /ClamXav.app/Contents/MacOS/ClamXav: Java is generating its shared archive, version 1.4

Paranoid Android doesn't work at all.

I've already bought the 2 books that you mentioned, but still have problems.

Your reference to script kiddies.......
I've been repeatedly hacked by a freaky guy who put a pictures of me on his website. I asked him to remove them, he refuses, and since then he's given me all kinds of hell. I do think that he is a script kiddie bent on making my life miserable. He wants to prove that he's in control.

And CJ MAC OSX IPOD.......
thanks for laughing at me. I do understand that the network icon is normal, and that there are server programs that can be turned on and off.
And I do understand that there are people who know more, who look down on those who know less.

And to anyone who reads this-- please, take me seriously. I appreciate those who have offered valid advice and answered my questions even if they are dumb.
 
mazzy said:
...
I've been repeatedly hacked by a freaky guy who put a pictures of me on his website. I asked him to remove them, he refuses, and since then he's given me all kinds of hell. I do think that he is a script kiddie bent on making my life miserable. He wants to prove that he's in control.
....
Click to expand...

Can you choose NOT to go to 'freaky guy's' web site, ever? That might help.... Do you get emails from him? Those can be blocked with a simple rule. You could also choose to complain to your ISP, if you know his email/web address.

Which of the things that you have mentioned, happened AFTER you got your Mac?
 
I don't go to his website. And I don't get emails from him, unless he's sending it in the form of spam, which I delete immediately. I have complained to my isp. They gave me a number, who gave me a number, etc, etc, etc. Bottom line, I'm not important enough for anyone to look into it. All of this happened before I got my mac, which is why I got the mac to begin with. I've been very careful and I want to make sure I'm locked down.
thanks
 
Would you look at the following file that looks like a logfile, and tell me what you you see.
tmp.0.gPUnUt
Jul 18 21:02:35 localhost kernel[0]: hi mem tramps at 0xffe00000
Jul 18 21:02:35 localhost kernel[0]: PAE enabled
Jul 18 21:02:35 localhost kernel[0]: standard timeslicing quantum is 10000 us
Jul 18 21:02:35 localhost kernel[0]: vm_page_bootstrap: 118829 free pages
Jul 18 21:02:35 localhost kernel[0]: mig_table_max_displ = 71
Jul 18 21:02:35 localhost kernel[0]: Enabling XMM register save/restore and SSE/SSE2 opcodes
Jul 18 21:02:35 localhost kernel[0]: ACPI CA 20051117 [debug level=0 layer=0]
Jul 18 21:02:35 localhost kernel[0]: AppleACPICPU: ProcessorApicId=0 LocalApicId=0 Enabled
Jul 18 21:02:35 localhost kernel[0]: AppleACPICPU: ProcessorApicId=1 LocalApicId=1 Enabled
Jul 18 21:02:35 localhost kernel[0]: Copyright (c) 1982, 1986, 1989, 1991, 1993
Jul 18 21:02:35 localhost kernel[0]: The Regents of the University of California. All rights reserved.
Jul 18 21:02:35 localhost kernel[0]: using 1262 buffer headers and 1262 cluster IO buffer headers
Jul 18 21:02:35 localhost kernel[0]: Enabling XMM register save/restore and SSE/SSE2 opcodes
Jul 18 21:02:35 localhost kernel[0]: IOAPIC: Version 0x20 Vectors 0:23
Jul 18 21:02:35 localhost kernel[0]: Started CPU 01
Jul 18 21:02:35 localhost kernel[0]: ACPI: System State [S0 S3 S4 S5] (S3)
Jul 18 21:02:35 localhost kernel[0]: Security auditing service present
Jul 18 21:02:35 localhost kernel[0]: BSM auditing present
Jul 18 21:02:35 localhost kernel[0]: disabled
Jul 18 21:02:35 localhost kernel[0]: rooting via boot-uuid from /chosen: 957987C7-CC08-43E0-A0A6-D28DB369D591
Jul 18 21:02:35 localhost kernel[0]: Waiting on <dict ID="0"><key>IOProviderClass</key><string ID="1">IOResources</string><key>IOResourceMatch</key><string ID="2">boot-uuid-media</string></dict>
Jul 18 21:02:35 localhost kernel[0]: USB caused wake event (EHCI)
Jul 18 21:02:35 localhost kernel[0]: FireWire (OHCI) Lucent ID 5811 PCI now active, GUID 0016cbfffe586f76; max speed s400.
Jul 18 21:02:35 localhost kernel[0]: Got boot device = IOService:/AppleACPIPlatformExpert/PCI0@0/AppleACPIPCI/SATA@1F,2/AppleAHCI/AppleAHCIPort@2/IOAHCIDevice@0/AppleAHCIDiskDriver/IOAHCIBlockStorageDevice/IOBlockStorageDriver/FUJITSU MHV2080BHPL Media/IOGUIDPartitionScheme/Apple_HFS_Untitled_1@2
Jul 18 21:02:35 localhost kernel[0]: BSD root: disk0s2, major 14, minor 1
Jul 18 21:02:35 localhost kernel[0]: CSRHIDTransitionDriver::probe:
Jul 18 21:02:35 localhost kernel[0]: CSRHIDTransitionDriver::start before command
Jul 18 21:02:35 localhost kernel[0]: CSRHIDTransitionDriver::stop
Jul 18 21:02:35 localhost kernel[0]: Jettisoning kernel linker.
Jul 18 21:02:35 localhost kernel[0]: Resetting IOCatalogue.
Jul 18 21:02:35 localhost kernel[0]: Matching service count = 4
Jul 18 21:02:35 localhost kernel[0]: Matching service count = 4
Jul 18 21:02:35 localhost kernel[0]: Matching service count = 4
Jul 18 21:02:35 localhost kernel[0]: Matching service count = 4
Jul 18 21:02:35 localhost kernel[0]: Matching service count = 4
Jul 18 21:02:35 localhost kernel[0]: mac 10.3 phy 6.1 radio 10.2
Jul 18 21:02:35 localhost kernel[0]: IOBluetoothHCIController::start Idle Timer Stopped
Jul 18 21:02:35 localhost kernel[0]: Previous Shutdown Cause: 3
Jul 18 21:02:33 localhost memberd[62]: memberd starting up
Jul 18 21:02:33 localhost mDNSResponder-108 (Jan 14 2006 02: 59:21)[55]: starting
Jul 18 21:02:35 localhost lookupd[66]: lookupd (version 369.5) starting - Tue Jul 18 21:02:35 2006
Jul 18 21:02:36 localhost configd[59]: com.apple.SystemConfiguration.DynamicPowerStep load failed
Jul 18 21:02:36 localhost diskarbitrationd[61]: disk0s2 hfs 3B00E13D-1C5A-3F93-82C6-8F3B7339EC1D Macintosh HD /
Jul 18 21:02:37 localhost kernel[0]: yukonosx: Ethernet address 00:16:cb:a2:a0:a9
Jul 18 21:02:37 localhost DirectoryService[70]: Launched version 2.1 (v353.1)
Jul 18 21:02:37 localhost kernel[0]: AirPort_Athr5424: Ethernet address 00:16:cb:04:b6:3b
Jul 18 21:02:38 localhost configd[59]: WirelessAirPortDeviceNameCopy(): no AirPort driver found
Jul 18 21:02:38 localhost lookupd[84]: lookupd (version 369.5) starting - Tue Jul 18 21:02:38 2006
Jul 18 21:02:40 localhost kernel[0]: display: Not usable
Jul 18 21:02:41 localhost kernel[0]: [HCIController][setupHardware] AFH Is Supported
Jul 18 21:02:41 localhost mDNSResponder: Couldn't read user-specified Computer Name; using default &#8218;ÄúMacintosh-0016CBA2A0A9&#8218;Äù instead
Jul 18 21:02:41 localhost mDNSResponder: Couldn't read user-specified local hostname; using default &#8218;ÄúMacintosh-0016CBA2A0A9.local&#8218;Äù instead
Jul 18 21:02:42 localhost mDNSResponder: Adding browse domain local.
Jul 18 21:02:42 localhost KernelEventAgent[54]: tid 00000000 received unknown event (256)
Jul 18 21:02:49 localhost /System/Library/PrivateFrameworks/Admin.framework/Resources/UpdateSettingsTool: UpdateSettings Error: makequeues -u returned 256
Jul 18 21:02:54 localhost /System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow: Login Window Application Started
Jul 18 21:02:55 localhost configd[59]: WirelessAirPortDeviceNameCopy(): no AirPort driver found
Jul 18 21:02:56 localhost configd[59]: WirelessAirPortDeviceNameCopy(): no AirPort driver found
Jul 18 21:03:07 localhost /System/Library/CoreServices/Setup Assistant.app/Contents/MacOS/Setup Assistant: _MDSuspendIndexing() 1
Jul 18 21:03:09 localhost /System/Library/CoreServices/Setup Assistant.app/Contents/MacOS/Setup Assistant: starting movie now\n
Jul 18 21:03:37 localhost /System/Library/CoreServices/Setup Assistant.app/Contents/MacOS/Setup Assistant: movie done now (hide)
Jul 18 21:03:44 localhost mDNSResponder: Couldn't read user-specified Computer Name; using default &#8218;ÄúMacintosh-0016CBA2A0A9&#8218;Äù instead
Jul 18 21:03:44 localhost mDNSResponder: Couldn't read user-specified local hostname; using default &#8218;ÄúMacintosh-0016CBA2A0A9.local&#8218;Äù instead
Jul 18 21:04:25 localhost ntpdate[203]: no servers can be used, exiting
Jul 18 21:05:37 roxys-computer configd[59]: setting hostname to "roxys-computer.local"
Jul 18 23:05:55 roxys-computer ntpdate[286]: can't find host time.apple.com\n
Jul 18 23:05:55 roxys-computer ntpdate[286]: no servers can be used, exiting
Jul 18 23:06:00 roxys-computer /System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow: Login Window Application Started
Jul 18 23:06:05 roxys-computer loginwindow[291]: Login Window Started Security Agent
Jul 18 23:07:54 roxys-computer kernel[0]: IPv6 packet filtering initialized, default to accept, logging disabled
Jul 18 23:08:25 roxys-computer kernel[0]: (88: coreservicesd)tfp: failed on 0:
Jul 18 23:12:16 roxys-computer kernel[0]: AppleYukon - en0 link active, 100-Mbit, full duplex, symmetric flow control enabled
Jul 18 23:12:16 roxys-computer configd[59]: executing /System/Library/SystemConfiguration/Kicker.bundle/Contents/Resources/enable-network
Jul 18 23:12:16 roxys-computer configd[59]: posting notification com.apple.system.config.network_change
Jul 18 23:12:16 roxys-computer lookupd[365]: lookupd (version 369.5) starting - Tue Jul 18 23:12:16 2006
Jul 18 23:12:18 roxys-computer configd[59]: target=enable-network: disabled
Jul 18 23:14:54 roxys-computer launchd: Server 0 in bootstrap 1103 uid 0: "/usr/sbin/lookupd"[365]: exited abnormally: Hangup
Jul 18 23:14:54 roxys-computer configd[59]: posting notification com.apple.system.config.network_change
Jul 18 23:14:54 roxys-computer lookupd[413]: lookupd (version 369.5) starting - Tue Jul 18 23:14:54 2006
Jul 19 05:15:00 roxys-computer cp: error processing extended attributes: Operation not permitted
Jul 19 10:15:01 roxys-computer postfix/postqueue[494]: warning: Mail system is down -- accessing queue directly

Again, thanks for your help.
 
er hi - could i just ask a quick question in this fascinating hack dialogue (that was not ironic btw) - saw something earlier about the ~ sign. I have a persistent little file that keeps appearing on my desktop with the name "~" I delete and lo & behold I notice it again at a later date. The file is only about 250kb in size.
Could it be related to the the bancos trojan i have to keep deleting everytime i run yahoos anti-spy.!! Sorry i know all this is pc rubbish but i only just bought my imac and still use the pc as an internet server to house network.
Intending to reformat hard drives of pcs at some point but curious to know what this is.
If you don't wanna answer, i guess i'll understand!!
cheers
 
Mazzy from the log files I see no breakin. What I do see is you might be unplugging a USB device without first un-mounting it. I also see you might be having problems with the Apple time server. Make sure you keep open the right ports to keep the time server function. You can do this by going to your System Preferences->Sharing->Firewall and clicking on the function "Network Time". This open the port you Mac uses to access a time server.

Also re-contact your ISP about getting spam from the same location. Right down the IP number and name-server of the reoccurring spam and tell your ISP tech support to please (with sugar on op) to block email from that user. Almost every ISP I have ever had would do that if you talk nice to them. If all else fails, change your email. Plus never open any attachments you are not expecting until you can verify the person actually sent it.
 
You don't need one, strictly speaking; the time server provides a reliable time that your machine can use to sync up its internal clock.
 
Here is another example of strange files--
system/library/PrivateFrameworks/install.framework/versions/A/resources/defaults.hint
/*********************************************************************************
* $Id: Default.hints,v 1.5 2005/03/02 01:25:03 shadow Exp $
*
* Upgrading hints for Mac OS X.
*
* This file may be modified to alter the way in which Upgrader treats
* certain files. Files for which no hints are provided, or for which
* the hints provided are not relevant given the actual conditions of the
* upgrade, are handled using built-in heuristics.
*
* A hints file is an ASCII property list consisting of an array of
* arrays. Each subarray contains a regular expression, followed by a list
* of attributes to be applied to paths which match the expression.
* The attempt to match a given path to suitable expressions stops when the
* first match is found.
*
* The following attributes are available:
*
* +ignore Don't even checksum this file. Don't mess with it no
* matter what. Children of an ignored folder are also ignored.
*
*
* Attributes may be freely intermixed, except that +ignore is incompatible
* with everything else, and the + and - version of the same attribute may
* not be used together.
*
* A couple of translations are performed on the input expressions
* to make the expression matching look more like shell globbing:
*
* ? becomes . Match any character
* * becomes [^/]* Match anything, but not across components
* \* becomes * 0 or more of preceeding expression
* . becomes \. Dots are literal
*
* EXCEPTION: '*' at the end of an expression with no other special characters
* matches any filename which matches the expression up to the '*'. This is
* different from the usual behavior of '*' in that multiple components may be
* matched.
*
* Additionally, ^ and $ are added to the beginning and end of each entry.
*
* Copyright (C) 1991-2004 by Apple Computer, Inc. All Rights Reserved.
*
*********************************************************************************/
(
("/private/tmp/*", "+ignore"),
("/private/var/tmp/*", "+ignore"),
("/Mac OS 9", "+ignore"),
("/private/etc/mtab", "+ignore"),
("/usr/share/zoneinfo/localtime", "+ignore"),
("/private/etc/localtime", "+ignore"),
("/private/var/vm/*", "+ignore"),
("/private/var/db/netinfo/*", "+ignore"),
("/private/var/run/*", "+ignore"),
("/private/var/at/*", "+ignore"),
("/private/var/spool/*", "+ignore"),
("/private/etc/dumpdates", "+ignore"),
("/private/etc/fstab", "+ignore"),
("/private/etc/iftab", "+ignore"),
("/private/etc/slpsa.conf", "+ignore"),
("/private/var/slp.regfile", "+ignore"),
("/private/etc/exports", "+ignore"),
("/private/etc/hosts.equiv", "+ignore"),
("/private/etc/hosts.lpd", "+ignore"),
("/private/etc/netgroup", "+ignore"),
("/private/etc/networks", "+ignore"),
("/private/etc/xtab", "+ignore"),
("/Network/Servers", "+ignore"),
("/Network/Servers/*", "+ignore"),
("/private/Network/Servers", "+ignore"),
("/lost+found", "+ignore"),
("/usr/Devices*", "+ignore"),
("/Library/Preferences/DirectoryService/ContactsNodeConfig.plist", "+ignore"),
("/Library/Preferences/DirectoryService/DSLDAPPlugInConfig.clpi", "+ignore"),
("/Library/Preferences/DirectoryService/SearchNodeConfig.plist", "+ignore"),
("/private/etc/mail/access", "+ignore"),
("/private/etc/mail/access.db", "+ignore"),
)

Is this a normal file??
 
These files are normal. Are you now *REALLY* going to look through *EVERY* bloody textfile, and if some random word springs your imgination, do you post the file's content here?! That's not normal, buddy. Yes, any UN*X contains many, many human-readable text-files with strange content. The words "library" and "access" will come up a couple of times if you're about to read those 22'500 text files ahead of you (or did you already read half of them by now?).

Please: Just stop _worrying_. Could you again tell us the problem with your computer instead? I mean: The things not working etc. Through all the unimportant text-file reading, I kinda lose track of your actual problem (besides paranoia).
 
Mazzy,

Nothing will be able to install in /System without you typing in your admin password. There are TONS of goofy little text files all over Unix-type machines. It's because open-source *nix was created as a labor of love by countless programmers. They love putting "Easter eggs" in.

There's even a way to play Tetris with the command-line text editor called Emacs. I don't remember exactly how, but it's on the web somewhere.

Doug
 
Ok, Ok!! I'll stop obsessing and leave you guys to people with real problems. Thank you all for being patient with me. Y'all have been great and I'm feeling much more secure and pleased for choosing a Mac. When I have real problems, I'll be back, but for now I'm just going to relax and enjoy!

And again........Thanks!!!
 
You must log in or register to reply here.
Back
Top