Sponsor

5 Critical Google Workspace Security Settings You're Probably Missing
Google Workspace misconfigurations or disabled security settings can be easy to miss. This guide from Nudge Security provides a deep dive on the top 5 Google Workspace security settings that should be on your checklist.
For each security setting, we cover:
- Common misconfigurations to look out for
- Best practices for effective risk reduction
- Considerations for tailoring settings based on user privilege
Learn what you can do today to significantly improve your Google Workspace security posture.
Rosetta: Planning ahead
There was a discussion on installing Rosetta in the Setup Manager channel on the Mac Admins Slack this week. (Actually, it was about getting an icon for Rosetta, but I digress). This reminded me that sometime earlier this year, I realized that all the software in my testing environment was available as a universal or Apple silicon app. That means I could remove the 'Install Rosetta' step from my enrollment workflow.
I am very well aware that most deployments are far more complex than my testing environment, but I also checked my production MacBook and only found two Intel apps: iBooks Author, which was discontinued a few years ago, but it still works and I keep it around because I have not yet converted all of my iBooks documents to Pages. The other one is the Sonos app.
As Mac Admins, we've gotten so used to reflexively installing Rosetta, that we stopped thinking about it. Admittedly, it isn't hard and doesn't take up much time or bandwidth, so why bother?
Untypically, Apple has given us a roadmap. macOS Tahoe is the last version of macOS to support (some) Intel Macs. macOS 27 will be the last version of macOS with general Rosetta support. Intel-only binaries will stop working with macOS 28, expected to release in late 2027.
Now is the time to assess which of your organization's software still requires Rosetta, i.e. which of your software does not come in Universal or Apple silicon binaries yet. An easy way to determine this is to go to the Software > Applications area in the System Report app. Or use this command:
system_profiler SPApplicationsDataType -json | jq '.SPApplicationsDataType[] | select(.arch_kind=="arch_i64") | ._name'
(Replace the final ._name
with .path
(no underscore) to see where the app is located.)
For command line tools, you can use the file
command:
$ file /usr/local/bin/desktoppr
/usr/local/bin/desktoppr: Mach-O universal binary with 2 architectures: [x86_64:Mach-O 64-bit executable x86_64] [arm64:Mach-O 64-bit executable arm64]
/usr/local/bin/desktoppr (for architecture x86_64): Mach-O 64-bit executable x86_64
/usr/local/bin/desktoppr (for architecture arm64): Mach-O 64-bit executable arm64
To check an entire directory:
find /usr/local/bin/ -perm +111 \! -type d -exec file {} \;
(This will list all executables in /usr/local/bin
which is where a lot of custom command line tools will be stored, but there might be more places that you need to check. The binaries that have only a single line with the x86_64
architecture are Intel only.)
We are now five years into the transition and any Intel-only apps or tools you identify are unlikely to have supportive or even responsive vendors. You will need time to communicate with the vendor and see if they will release an update. Otherwise, you and the users of the app will need the time to figure out alternative software or solutions. Planning ahead now might avert a crisis, two years from now, when the first Macs that will only run macOS 28 are going to ship.
📰 News and Opinion
Apple released a new iPad Pro, 14-inch MacBook Pro, and Vision Pro, all with a new M5 chip.
Ironically though, even though all the new products have the 'Pro' moniker, the M5 chip does not yet come in the Pro or Max variant.
The New MacBook Pro Is €35 Less Expensive in E.U. Countries, Ships Without a Charger
the new MacBook Pro is less expensive in nearly every region in which the A.C. adapter is now a configure-to-order option — even after adding the adapter.
And you can select to add a charger if you want.
⚙️ Apple Updates
How to Turn Liquid Glass into a Solid Interface
Here’s how to control its effects and make your interface more usable.
🔐 Security and Privacy
Juice Jacking Protection Setting Broken in iOS 26
Unfortunately, as a post on a private mailing list alerted me, there’s a bug in iOS 26.0.1 related to the accessory protection controls
🔨 Support and Tutorials
Check if an app is stuck in translocation
Sometimes apps that should run fine seem to find problems where there shouldn’t be any, becoming slow to launch, unable to update, erratic, and easily crashed. One reason that can account for these is that the app has become stuck in translocation.
This actually happened to me this week...
Terraform 101: Introduction
This is going to be the first installment of a series of posts where I’m going to dive into Terraform.
Unlocking FileVault via SSH on macOS Tahoe
Rich Trouton on DerFlounder
One of the changes Apple has introduced with macOS Tahoe is the ability to use SSH at the unified login screen available on Apple Silicon Macs.
🤖 Scripting and Automation
A Bookmarklet for Creating Text Fragments
When linking to sites, I’ve often wished I could link directly to specific text on a page rather than the page itself.
The process in the post, including the postscript, might be more interesting than the solution.
I am sorry, but everyone is getting syntax highlighting wrong
Like any tool, it can be used correctly or incorrectly. Let’s see how to use syntax highlighting to help you work.
Reverse Engineering iWork
Andrew Sampson
The app I’m working on ingests a lot of files, and there’s no good solution for parsing .key, .numbers, or .pages files.
Amazing deep dive. This could yield some useful automations.
DDM OS Reminder
While Apple's Declarative Device Management (DDM) provides Mac Admins a powerful method to enforce macOS updates, its built-in notification tends to be too subtle for most Mac Admins.
Turn Jamf Compliance Output into Real Audit Evidence
It reads computer inventory from Jamf Pro, pulls the EA your baseline emits, normalizes whatever format it finds, and writes two CSVs
🎧 Listen
Exploring macOS 26 (Tahoe) Updates, Apple Product Upgrades, and MDM Strategies
the hosts discuss the latest release of macOS 26 (Tahoe), including new features and user experiences.
Apple now makes up 63% of enterprise endpoints
Chris Chapman from MacStadium joins the show to discuss their recent CIO survey, which reveals that Apple now accounts for 63% of enterprise endpoints.
🦣 Social Media
Craig Hockenberry on Mastodon
mastodon.social