Rixstep
 About | ACP | Buy | Industry Watch | Learning Curve | News | Products | Search | Substack
Home » Learning Curve

Guerilla CLIX

A digression with free downloads. Part one of two.


Get It

Try It

The Apple OS X transition from 10.6 to 10.7 - and beyond to 10.8 - in some ways represents a sea change in how this 'best of breed' operating system works for the end user. Successive iterations of OS X took it from the clean and elegant original design to something more and more complex - and unwieldy, leading 'Pogueman' to formalise his principle: that software seems to continue to improve until it's improved so much it's finally become unusable.

Privacy concerns mount as the system engineers at Apple grow more and more profligate about storing sensitive information in more and more poorly documented locations. A mere 'scrub' of user areas is no longer sufficient protection - scrubbing an entire hard drive from a privileged process or a 'wipe and reinstall' with maximum shredding seem the only alternatives.

But neither of these operations can be performed on a daily basis, even though disaster can strike at any time.


This article is a meandering look at what's happened with OS X in the past year or so, and what you can do to better protect yourself. The article will blend security and privacy concerns with an overall need to 'tidy' a system up on a regular basis. The order of topics is somewhat random.

This article assumes use of 10.7 or better. A second part of this series will deal exclusively with 10.8.

CLIX downloads are also included.

1. Safari 6 & Cookies

Get it over with, short and not particularly sweet: Safari 6 strews cookies all over the place. The old location:

~/Library/Cookies

Has a new file:

Cookies.binarycookies

And as its strange name implies, it's a binary file.

$ hexdump Cookies.binarycookies
0000000 63 6f 6f 6b 00 00 00 00 00 00 00 00 07 17 20 05
0000010

The format's a new one, signified by its magic.

0000000000000000 cook

And of course it contains a lot of information. Cookies can now be stored in cache, in the dedicated cookie file, or in 'local storage'. So Cookies.binarycookies won't have it all, and removing that file won't clean your system of all cookies.

You're also bound to find cookies from a lot of sites you never heard of, this because Safari's promise to block cookies from sites you never visit has never really worked properly.



[For the insatiably curious: youtube-nocookie.com is registered to Google, and accessing it at root on port 80 yields a 404. Ed.]

Checking server [whois.markmonitor.com]
Results:

MarkMonitor is the Global Leader in Online Brand Protection.

Registrant:
        DNS Admin
        Google Inc.
        1600 Amphitheatre Parkway
        Mountain View CA 94043
        US
        dns-admin@google.com +1.6502530000 Fax: +1.6506188571

    Domain Name: youtube-nocookie.com

<!DOCTYPE html>
<html lang=en>
  <meta charset=utf-8>
  <meta name=viewport content='initial-scale=1, minimum-scale=1, width=device-width'>
  <title>Error 404 (Not Found)!!1</title>
  <style>
    *{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}
    html{background:#fff;color:#222;padding:15px}
    body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px}* >
    body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}
    p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}
    a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;
    max-width:none;padding-right:0}}
  </style>
  <a href=//www.google.com/><img src=//www.google.com/images/errors/logo_sm.gif alt=Google></a>
  <p><b>404.</b> <ins>That’s an error.</ins>
  <p>The requested URL <code>/</code> was not found on this server.  <ins>That’s all we know.</ins>

Obviously cookies are a major concern when using Safari 6.

Safari 6 also stores cookies in the /var/folders hive - in the part you can't get to without privilege escalation. This part can have some rather strange remnants such as the following unused path (237 bytes long):

/private/var/folders/zz/zyxvpxvq6csfxvn_n00000s0000068/C
/com.apple.SoftwareUpdate/content/downloads/56/07/041-6215/0ulfdubx0svowmm8oq36wo1yynibgcuxyw
/FlashbackMalwareRemover.pkg/content/downloads/56/07/041-6215/0ulfdubx0svowmm8oq36wo1yynibgcuxyw

The obvious way to get rid of Safari cookies is to let Safari 6 do it. But given Safari's track record in not quite doing things as advertised, it's better to know where the cookies are stored so you can take care of things yourself. The best way to do this - as your favourite sites will replace their cookies almost immediately - is to close all open sessions before asking the app to remove them.

The new 'Guerilla CLIX' package inspects and removes files in /var/folders whilst leaving the directory structure intact.

2. Document Revisions

Forget the fact for a moment how some of the features of the lions are so agonisingly slow that they got people scratching their heads, muttering 'WTF' under their breath. Ponder instead the uncanny architecture they're proposing. Such as with the document revision system aka versioning system - the stuff hidden away from you at /.DocumentRevisions-V100 (and other places).

Document revisions were introduced in 10.7 and are supposed to be a wave of the future. Not everyone is keen on waves like that. The 'back-assward' logic involved smells of a 'user experience engineer' with little time at a keyboard. But there's always something more, isn't there? For the system is one of the biggest privacy leaks on OS X.

Where are the system preferences for this system? How does a user turn the system off? Or better yet - revert? What happens to copies of files that no longer exist because the user has destroyed them - totally destroyed them? Is there now a file system hook that further slows the system down so that every file removal must first pass through the revision system for further tidying?

This is what the system looks like after it's been tidied.

total 0
d--x--x--x   7 root  wheel   238 Aug 26 03:06 .
drwxr-xr-x  33 root  wheel  1190 Aug 27 11:55 ..
drwx------   3 root  wheel   102 Sep  3 03:27 .cs
drw-------   2 root  wheel    68 Sep  3 02:46 ChunkTemp
d--x--x--x   3 root  wheel   102 Aug 26 03:06 PerUID
drwx------   2 root  wheel    68 Sep  3 03:27 db-V1
drwx--x--x   2 root  wheel    68 Sep  3 02:46 staging

.DocumentRevisions-V100/.cs:
total 0
drwx------  3 root  wheel  102 Sep  3 03:27 .
d--x--x--x  7 root  wheel  238 Aug 26 03:06 ..
drwx------  3 root  wheel  102 Aug 26 03:06 ChunkStorage

.DocumentRevisions-V100/.cs/ChunkStorage:
total 0
drwx------  3 root  wheel  102 Aug 26 03:06 .
drwx------  3 root  wheel  102 Sep  3 03:27 ..
drwx------  3 root  wheel  102 Aug 26 03:06 0

.DocumentRevisions-V100/.cs/ChunkStorage/0:
total 0
drwx------  3 root  wheel  102 Aug 26 03:06 .
drwx------  3 root  wheel  102 Aug 26 03:06 ..
drwx------  3 root  wheel  102 Aug 26 03:06 0

.DocumentRevisions-V100/.cs/ChunkStorage/0/0:
total 0
drwx------  3 root  wheel  102 Aug 26 03:06 .
drwx------  3 root  wheel  102 Aug 26 03:06 ..
drwx------  2 root  wheel   68 Sep  3 03:26 0

.DocumentRevisions-V100/.cs/ChunkStorage/0/0/0:
total 0
drwx------  2 root  wheel   68 Sep  3 03:26 .
drwx------  3 root  wheel  102 Aug 26 03:06 ..

.DocumentRevisions-V100/ChunkTemp:
total 0
drw-------  2 root  wheel   68 Sep  3 02:46 .
d--x--x--x  7 root  wheel  238 Aug 26 03:06 ..

.DocumentRevisions-V100/PerUID:
total 0
d--x--x--x  3 root     wheel  102 Aug 26 03:06 .
d--x--x--x  7 root     wheel  238 Aug 26 03:06 ..
d--x------  8 osxuser  wheel  272 Sep  3 00:04 501

.DocumentRevisions-V100/PerUID/501:
total 0
d--x------  8 osxuser  wheel  272 Sep  3 00:04 .
d--x--x--x  3 root     wheel  102 Aug 26 03:06 ..
d--x--x--x  3 root     wheel  102 Aug 28 20:07 5
d--x--x--x  3 root     wheel  102 Aug 30 20:41 9
d--x--x--x  3 root     wheel  102 Aug 30 20:41 a
d--x--x--x  3 root     wheel  102 Sep  1 20:12 c
d--x--x--x  3 root     wheel  102 Sep  2 14:05 d
d--x--x--x  3 root     wheel  102 Sep  2 20:21 f

.DocumentRevisions-V100/PerUID/501/5:
total 0
d--x--x--x  3 root     wheel  102 Aug 28 20:07 .
d--x------  8 osxuser  wheel  272 Sep  3 00:04 ..
d--x--x--x  2 root     wheel   68 Sep  3 03:20 com.apple.documentVersions

.DocumentRevisions-V100/PerUID/501/5/com.apple.documentVersions:
total 0
d--x--x--x  2 root  wheel   68 Sep  3 03:20 .
d--x--x--x  3 root  wheel  102 Aug 28 20:07 ..

.DocumentRevisions-V100/PerUID/501/9:
total 0
d--x--x--x  3 root     wheel  102 Aug 30 20:41 .
d--x------  8 osxuser  wheel  272 Sep  3 00:04 ..
d--x--x--x  2 root     wheel   68 Sep  3 03:20 com.apple.documentVersions

.DocumentRevisions-V100/PerUID/501/9/com.apple.documentVersions:
total 0
d--x--x--x  2 root  wheel   68 Sep  3 03:20 .
d--x--x--x  3 root  wheel  102 Aug 30 20:41 ..

.DocumentRevisions-V100/PerUID/501/a:
total 0
d--x--x--x  3 root     wheel  102 Aug 30 20:41 .
d--x------  8 osxuser  wheel  272 Sep  3 00:04 ..
d--x--x--x  2 root     wheel   68 Sep  3 03:20 com.apple.documentVersions

.DocumentRevisions-V100/PerUID/501/a/com.apple.documentVersions:
total 0
d--x--x--x  2 root  wheel   68 Sep  3 03:20 .
d--x--x--x  3 root  wheel  102 Aug 30 20:41 ..

.DocumentRevisions-V100/PerUID/501/c:
total 0
d--x--x--x  3 root     wheel  102 Sep  1 20:12 .
d--x------  8 osxuser  wheel  272 Sep  3 00:04 ..
d--x--x--x  2 root     wheel   68 Sep  3 03:21 com.apple.documentVersions

.DocumentRevisions-V100/PerUID/501/c/com.apple.documentVersions:
total 0
d--x--x--x  2 root  wheel   68 Sep  3 03:21 .
d--x--x--x  3 root  wheel  102 Sep  1 20:12 ..

.DocumentRevisions-V100/PerUID/501/d:
total 0
d--x--x--x  3 root     wheel  102 Sep  2 14:05 .
d--x------  8 osxuser  wheel  272 Sep  3 00:04 ..
d--x--x--x  2 root     wheel   68 Sep  3 03:21 com.apple.documentVersions

.DocumentRevisions-V100/PerUID/501/d/com.apple.documentVersions:
total 0
d--x--x--x  2 root  wheel   68 Sep  3 03:21 .
d--x--x--x  3 root  wheel  102 Sep  2 14:05 ..

.DocumentRevisions-V100/PerUID/501/f:
total 0
d--x--x--x  3 root     wheel  102 Sep  2 20:21 .
d--x------  8 osxuser  wheel  272 Sep  3 00:04 ..
d--x--x--x  2 root     wheel   68 Sep  3 03:21 com.apple.documentVersions

.DocumentRevisions-V100/PerUID/501/f/com.apple.documentVersions:
total 0
d--x--x--x  2 root  wheel   68 Sep  3 03:21 .
d--x--x--x  3 root  wheel  102 Sep  2 20:21 ..

.DocumentRevisions-V100/db-V1:
total 0
drwx------  2 root  wheel   68 Sep  3 03:27 .
d--x--x--x  7 root  wheel  238 Aug 26 03:06 ..

.DocumentRevisions-V100/staging:
total 0
drwx--x--x  2 root  wheel   68 Sep  3 02:46 .
d--x--x--x  7 root  wheel  238 Aug 26 03:06 ..

This is what the system looks like after a few days of renewed use.

total 0
d--x--x--x   7 root  wheel   238 Aug 26 03:06 .
drwxr-xr-x  33 root  wheel  1190 Aug 27 11:55 ..
drwx------   5 root  wheel   170 Sep  3 02:46 .cs
drw-------   2 root  wheel    68 Sep  3 02:46 ChunkTemp
d--x--x--x   3 root  wheel   102 Aug 26 03:06 PerUID
drwx------   4 root  wheel   136 Aug 27 11:55 db-V1
drwx--x--x   2 root  wheel    68 Sep  3 02:46 staging

.DocumentRevisions-V100/.cs:
total 5624
drwx------  5 root  wheel      170 Sep  3 02:46 .
d--x--x--x  7 root  wheel      238 Aug 26 03:06 ..
drwx------  3 root  wheel      102 Aug 26 03:06 ChunkStorage
-rw-r--r--  1 root  wheel   159744 Sep  3 02:20 ChunkStoreDatabase
-rw-r--r--  1 root  wheel  2719232 Sep  3 02:46 ChunkStoreDatabase-wal

.DocumentRevisions-V100/.cs/ChunkStorage:
total 0
drwx------  3 root  wheel  102 Aug 26 03:06 .
drwx------  5 root  wheel  170 Sep  3 02:46 ..
drwx------  3 root  wheel  102 Aug 26 03:06 0

.DocumentRevisions-V100/.cs/ChunkStorage/0:
total 0
drwx------  3 root  wheel  102 Aug 26 03:06 .
drwx------  3 root  wheel  102 Aug 26 03:06 ..
drwx------  3 root  wheel  102 Aug 26 03:06 0

.DocumentRevisions-V100/.cs/ChunkStorage/0/0:
total 0
drwx------  3 root  wheel  102 Aug 26 03:06 .
drwx------  3 root  wheel  102 Aug 26 03:06 ..
drwx------  3 root  wheel  102 Aug 27 11:55 0

.DocumentRevisions-V100/.cs/ChunkStorage/0/0/0:
total 14344
drwx------  3 root  wheel      102 Aug 27 11:55 .
drwx------  3 root  wheel      102 Aug 26 03:06 ..
-rw-------  1 root  wheel  7342171 Sep  3 02:46 2

.DocumentRevisions-V100/ChunkTemp:
total 0
drw-------  2 root  wheel   68 Sep  3 02:46 .
d--x--x--x  7 root  wheel  238 Aug 26 03:06 ..

.DocumentRevisions-V100/PerUID:
total 0
d--x--x--x  3 root     wheel  102 Aug 26 03:06 .
d--x--x--x  7 root     wheel  238 Aug 26 03:06 ..
d--x------  8 osxuser  wheel  272 Sep  3 00:04 501

.DocumentRevisions-V100/PerUID/501:
total 0
d--x------  8 osxuser  wheel  272 Sep  3 00:04 .
d--x--x--x  3 root     wheel  102 Aug 26 03:06 ..
d--x--x--x  3 root     wheel  102 Aug 28 20:07 5
d--x--x--x  3 root     wheel  102 Aug 30 20:41 9
d--x--x--x  3 root     wheel  102 Aug 30 20:41 a
d--x--x--x  3 root     wheel  102 Sep  1 20:12 c
d--x--x--x  3 root     wheel  102 Sep  2 14:05 d
d--x--x--x  3 root     wheel  102 Sep  2 20:21 f

.DocumentRevisions-V100/PerUID/501/5:
total 0
d--x--x--x  3 root     wheel  102 Aug 28 20:07 .
d--x------  8 osxuser  wheel  272 Sep  3 00:04 ..
d--x--x--x  7 root     wheel  238 Aug 28 20:09 com.apple.documentVersions

.DocumentRevisions-V100/PerUID/501/5/com.apple.documentVersions:
total 0
d--x--x--x  7 root     wheel    238 Aug 28 20:09 .
d--x--x--x  3 root     wheel    102 Aug 28 20:07 ..
-r--r--r--@ 1 osxuser  staff  51909 Aug 28 20:09 0055CE8B-0164-4C10-89ED-A2CE27E2DAC1.png
-r--r--r--@ 1 osxuser  staff  53211 Aug 28 20:07 41AC09C9-B5E6-4B71-BA07-3F85B7C70EB3.png
-r--r--r--@ 1 osxuser  staff  48313 Aug 28 20:07 67D91EAD-D0BB-4F68-BDCC-84EF56F2B394.png
-r--r--r--@ 1 osxuser  staff  53046 Aug 28 20:08 7E1ED952-94C2-4968-9323-F83DF8C6357F.png
-r--r--r--@ 1 osxuser  staff  52790 Aug 28 20:08 D204F669-0C49-4E50-849F-94DA45E4B5D4.png

.DocumentRevisions-V100/PerUID/501/9:
total 0
d--x--x--x  3 root     wheel  102 Aug 30 20:41 .
d--x------  8 osxuser  wheel  272 Sep  3 00:04 ..
d--x--x--x  4 root     wheel  136 Aug 30 20:41 com.apple.documentVersions

.DocumentRevisions-V100/PerUID/501/9/com.apple.documentVersions:
total 0
d--x--x--x  4 root     wheel     136 Aug 30 20:41 .
d--x--x--x  3 root     wheel     102 Aug 30 20:41 ..
-r--r--r--@ 1 osxuser  staff  712159 Aug 30 20:41 73DCB245-272F-4FD5-80D2-C42228B8E264.jpg
-r--r--r--@ 1 osxuser  staff  846795 Aug 29 23:36 9E806027-277F-454B-A199-2E923FE832E2.jpg

.DocumentRevisions-V100/PerUID/501/a:
total 0
d--x--x--x  3 root     wheel  102 Aug 30 20:41 .
d--x------  8 osxuser  wheel  272 Sep  3 00:04 ..
d--x--x--x  4 root     wheel  136 Aug 30 20:41 com.apple.documentVersions

.DocumentRevisions-V100/PerUID/501/a/com.apple.documentVersions:
total 0
d--x--x--x  4 root     wheel     136 Aug 30 20:41 .
d--x--x--x  3 root     wheel     102 Aug 30 20:41 ..
-r--r--r--@ 1 osxuser  staff  147599 Aug 29 22:44 1BD178FD-A287-42DC-97DF-86A01166822F.jpg
-r--------@ 1 osxuser  staff   73521 Aug 30 20:41 C92F9135-FFA6-4C07-A3E5-4FA0197BF13C.jpg

.DocumentRevisions-V100/PerUID/501/c:
total 0
d--x--x--x  3 root     wheel  102 Sep  1 20:12 .
d--x------  8 osxuser  wheel  272 Sep  3 00:04 ..
d--x--x--x  8 root     wheel  272 Sep  1 20:15 com.apple.documentVersions

.DocumentRevisions-V100/PerUID/501/c/com.apple.documentVersions:
total 0
d--x--x--x  8 root     wheel     272 Sep  1 20:15 .
d--x--x--x  3 root     wheel     102 Sep  1 20:12 ..
-r--r--r--@ 1 osxuser  staff  314546 Sep  1 20:12 20B0F31E-495F-44DA-89CB-843776D86020.png
-r--r--r--@ 1 osxuser  staff  313340 Sep  1 20:14 2A3A826C-98A7-47B9-AAB0-FF0EF2D65240.png
-r--r--r--@ 1 osxuser  staff  313945 Sep  1 20:13 4B4658C1-8D16-48C5-B33A-2E7297C74733.png
-r--r--r--@ 1 osxuser  staff  370892 Sep  1 20:02 A0172EAC-71C6-425D-B16A-4BBB7BD95E8A.png
-r--r--r--@ 1 osxuser  staff  313424 Sep  1 20:13 D95503E1-B2D5-40AF-843D-C51FA4A7D8FF.png
-r--r--r--@ 1 osxuser  staff  312597 Sep  1 20:15 FDC1F7AE-4113-464A-8A4C-37603BB1A60B.png

.DocumentRevisions-V100/PerUID/501/d:
total 0
d--x--x--x    3 root     wheel   102 Sep  2 14:05 .
d--x------    8 osxuser  wheel   272 Sep  3 00:04 ..
d--x--x--x  106 root     wheel  3604 Sep  3 02:46 com.apple.documentVersions

.DocumentRevisions-V100/PerUID/501/d/com.apple.documentVersions:
total 0
d--x--x--x  106 root     wheel  3604 Sep  3 02:46 .
d--x--x--x    3 root     wheel   102 Sep  2 14:05 ..
-r--------@   1 osxuser  staff  7329 Sep  3 01:52 017E7B99-7CA3-4691-89E7-550F9BB589B5.m
-r--------@   1 osxuser  staff  8269 Sep  2 14:14 01BB75D7-65D6-402F-BD1A-A8E43566DC3E.m
-r--------@   1 osxuser  staff  7430 Sep  3 02:13 0218F9D5-2658-4A30-A263-5892A35EDBB7.m
-r--------@   1 osxuser  staff  7537 Sep  3 02:07 0309F170-1FA4-439C-8A89-2E743CAAED8D.m
-r--------@   1 osxuser  staff  8456 Sep  2 14:29 04AC4168-778B-4363-A294-B41C75793F55.m
-r--------@   1 osxuser  staff  8438 Sep  2 14:23 059A5A64-4E5C-45E3-81C3-CCBE120E45BD.m
-r--------@   1 osxuser  staff  7700 Sep  3 02:29 06451AC8-DA69-4245-A268-1010C581C1FB.m
-r--------@   1 osxuser  staff  8261 Sep  2 14:05 096522F1-1682-48C0-AEF7-E630A999B04C.m
-r--------@   1 osxuser  staff  8438 Sep  2 14:23 09829802-68F0-4284-94E1-DB35AD7482FD.m
-r--------@   1 osxuser  staff  7706 Sep  3 02:31 09E7FFCD-30C7-49B2-ACC5-4AFEE72AEFBE.m
-r--------@   1 osxuser  staff  8434 Sep  2 14:23 0E321AFF-7DFA-4725-8F1E-97B1A80E5B6E.m
-r--------@   1 osxuser  staff  7228 Sep  1 15:54 100F6527-26AD-4A05-9014-EDAE8BF82BE2.m
-r--------@   1 osxuser  staff  7228 Sep  1 15:54 10F41D72-38BD-4891-901E-F7F3E9577198.m
-r--------@   1 osxuser  staff  8165 Sep  2 14:06 13A410C6-5EEA-4319-B7B0-E0476025B246.m
-r--------@   1 osxuser  staff  7371 Sep  3 02:03 16821BB2-85D5-4E67-B6ED-5595B661825F.m
-r--------@   1 osxuser  staff  7327 Sep  3 01:46 19516BA6-AF8E-4E56-B4C6-7847ED5D66F1.m
-r--------@   1 osxuser  staff  7331 Sep  3 01:50 1C6F60EF-B194-466F-BAA2-144D36632A4E.m
-r--------@   1 osxuser  staff  7745 Sep  3 02:36 1CC9191E-3EA2-4970-828D-793E779040FB.m
-r--------@   1 osxuser  staff  7696 Sep  3 02:29 206FDCD9-C6FD-40C9-AB10-E03C007F3F38.m
-r--------@   1 osxuser  staff  8504 Sep  2 17:45 22D13AB5-0B45-4B55-A3B0-33F50F304536.m
-r--------@   1 osxuser  staff  8456 Sep  2 14:29 243E9869-CBAB-44B5-B767-F5AFEC3CD95F.m
-r--------@   1 osxuser  staff  8433 Sep  2 14:23 263D0E89-1D4B-4574-9E13-08B4010FC9C5.m
-r--------@   1 osxuser  staff  7353 Sep  3 02:00 28ADAC9D-7E48-4F99-A97A-E47A5CB463E9.m
-r--------@   1 osxuser  staff  8152 Sep  2 14:09 29005B79-26C9-4DED-A392-018E135A1D70.m
-r--------@   1 osxuser  staff  7695 Sep  3 02:28 29C6E1E2-B109-471B-9894-9DD3AE974092.m
-r--------@   1 osxuser  staff  8347 Sep  2 14:22 2C15F0B0-7A80-4D90-8687-5B257E920CBA.m
-r--------@   1 osxuser  staff  7562 Sep  3 02:22 310F8A4F-3D46-463D-900B-CD0EA01FECC1.m
-r--------@   1 osxuser  staff  8583 Sep  2 17:53 331B23A0-6988-48C2-B01A-6057F26024C9.m
-r--------@   1 osxuser  staff  7696 Sep  3 02:27 37EE6F0E-2A8E-45A5-9CA7-0AF064452A9A.m
-r--------@   1 osxuser  staff  7467 Sep  3 02:15 3AB2CC3D-7CF6-457D-BD7D-BA0F0103AEEF.m
-r--------@   1 osxuser  staff  7519 Sep  3 02:17 3D2E7FAB-79D3-4ADC-8138-0F4D0F72D78E.m
-r--------@   1 osxuser  staff  8271 Sep  2 14:17 3DB9827D-F439-4152-BAE1-695984C379A1.m
-r--------@   1 osxuser  staff  7423 Sep  3 02:04 44086594-64A5-4926-B663-336C5EA3911D.m
-r--------@   1 osxuser  staff  7325 Sep  3 01:57 44D90AF3-9646-453A-83D2-597EFD927D70.m
-r--------@   1 osxuser  staff  7474 Sep  3 02:15 49FE360A-28FB-420B-A0FE-63FF261622CF.m
-r--------@   1 osxuser  staff  8474 Sep  2 14:29 4D6809CE-1377-4DB0-91D1-B3C42B31D678.m
-r--------@   1 osxuser  staff  7304 Sep  2 20:15 4E2D270E-83B0-4944-9958-476B0ABCF959.m
-r--------@   1 osxuser  staff  7429 Sep  3 02:05 4F8E582F-12BD-4D53-BA27-E2E9F5401F21.m
-r--------@   1 osxuser  staff  8432 Sep  2 14:23 50978D8E-4E1F-439E-A06B-5D64F658B186.m
-r--------@   1 osxuser  staff  7289 Sep  3 01:52 57DC8C39-7C50-4170-A033-7A95414A639B.m
-r--------@   1 osxuser  staff  7565 Sep  3 02:09 5AAFDAB5-CE0A-46C9-A284-A437A2E49125.m
-r--------@   1 osxuser  staff  7535 Sep  3 02:07 5C056CF6-EA41-4A62-A789-743C15188335.m
-r--------@   1 osxuser  staff  8460 Sep  2 14:28 5DBD4112-188B-4607-8235-1C374521E941.m
-r--------@   1 osxuser  staff  7966 Sep  3 02:41 627FEE96-6F7B-4684-904C-F5ADF19CBA69.m
-r--------@   1 osxuser  staff  8280 Sep  2 14:15 630640D4-C099-406E-B4A6-14619A0FD3DE.m
-r--------@   1 osxuser  staff  8456 Sep  2 14:27 6552B468-F8A3-4217-98B4-2DAF01F94394.m
-r--------@   1 osxuser  staff  8152 Sep  2 14:11 670DFA17-EAC7-4A80-84AA-D9B35735E6BE.m
-r--------@   1 osxuser  staff  8456 Sep  2 14:28 67C9BCB7-3833-4F66-A8A2-66430610214E.m
-r--------@   1 osxuser  staff  7310 Sep  2 20:17 6A6F970A-6E3C-427A-84D4-1B2C7DC4E5CE.m
-r--------@   1 osxuser  staff  7429 Sep  3 02:14 6A7F0CA9-2A2E-4BC5-B751-24FAF9A172FF.m
-r--------@   1 osxuser  staff  7699 Sep  3 02:29 6BC1800F-BE99-4866-B6B9-824ECE2D64D0.m
-r--------@   1 osxuser  staff  7333 Sep  3 01:50 6F9FE3B1-7993-4142-822A-CB779575DEF0.m
-r--------@   1 osxuser  staff  7310 Sep  2 20:17 73B66DBE-0075-46F8-95C7-6FAC736A9FD1.m
-r--------@   1 osxuser  staff  7964 Sep  3 02:46 7C711DA1-42CA-4CE6-99B3-1D129600E970.m
-r--------@   1 osxuser  staff  7429 Sep  3 02:05 812D3ED3-DB7F-4719-BFFC-C1DE480BC61D.m
-r--------@   1 osxuser  staff  8357 Sep  1 02:00 82B67D9D-6969-42C7-902A-61DA7B9D5D31.m
-r--------@   1 osxuser  staff  7696 Sep  3 02:25 84DCB954-C0F8-47C1-85D9-DD2FC43E946D.m
-r--------@   1 osxuser  staff  7484 Sep  3 02:05 851F874F-84F6-4964-AF2D-C2321587AB88.m
-r--------@   1 osxuser  staff  8265 Sep  2 14:13 8522A632-1896-437E-A622-3E97A4602E4B.m
-r--------@   1 osxuser  staff  8399 Sep  2 14:24 897318DE-941C-4D5C-9577-A1E7EC306988.m
-r--------@   1 osxuser  staff  8502 Sep  2 17:45 8995F5CE-F954-49E1-8A70-9217CA6BA739.m
-r--------@   1 osxuser  staff  8443 Sep  2 14:22 8BD5F630-ECAE-4E9E-8369-2B6B4483442F.m
-r--------@   1 osxuser  staff  7566 Sep  3 02:09 8F514D6B-3E0C-42A8-878C-236FAB63A224.m
-r--------@   1 osxuser  staff  7696 Sep  3 02:30 92CB9849-CF76-4528-8953-6F77375449EB.m
-r--------@   1 osxuser  staff  7717 Sep  3 02:25 94AE6588-9795-4E9E-97EC-3F943686E257.m
-r--------@   1 osxuser  staff  7808 Sep  3 02:37 9624EC8C-B558-4AFF-91D1-5AEE0DFD2D76.m
-r--------@   1 osxuser  staff  7227 Sep  2 20:12 978E67E5-9ADA-47B4-9BCB-D08C6B29FDE0.m
-r--------@   1 osxuser  staff  7696 Sep  3 02:32 9B4027D0-8C54-4E00-8C32-D824A7A2BC29.m
-r--------@   1 osxuser  staff  7308 Sep  3 01:44 A09643FD-37B6-4EC2-A803-728C42504A59.m
-r--------@   1 osxuser  staff  7486 Sep  3 02:15 A1B19A3E-FF72-414B-8D73-66948BF80074.m
-r--------@   1 osxuser  staff  7308 Sep  2 20:16 A48D69B9-282A-4E7A-AE44-F4BFE158D707.m
-r--------@   1 osxuser  staff  8269 Sep  2 14:15 A7595BDF-F8C7-41A6-957E-92879754A8FA.m
-r--------@   1 osxuser  staff  7273 Sep  3 02:01 AE32D158-137B-4230-9BB4-AD47EADBF210.m
-r--------@   1 osxuser  staff  7310 Sep  3 01:45 B133BC95-E161-425E-9A13-CFAC76A067B0.m
-r--------@   1 osxuser  staff  7708 Sep  3 02:23 BBB8CC9E-2073-4C01-96E7-E3CE864529FA.m
-r--------@   1 osxuser  staff  8152 Sep  2 14:05 BD8F7BCE-9E81-4E29-B8D9-B25D8D28BFDB.m
-r--------@   1 osxuser  staff  7537 Sep  3 02:08 C2A6F18E-CFAA-4C85-9638-59C516D9FD67.m
-r--------@   1 osxuser  staff  7697 Sep  3 02:27 C3A7004F-7964-468E-BDF3-69162962631E.m
-r--------@   1 osxuser  staff  7537 Sep  3 02:09 C5DFD7BC-449C-4AC5-B116-7DE3A6FD2E5F.m
-r--------@   1 osxuser  staff  7308 Sep  2 20:16 C5E136DF-2DDA-4FD7-9026-B76F1E90FF9F.m
-r--------@   1 osxuser  staff  7700 Sep  3 02:29 C9ECCCBB-C50A-4F38-B275-8E699C722976.m
-r--------@   1 osxuser  staff  7281 Sep  2 20:14 CDC06DE4-3788-48FD-9A8A-4C03DFF7D858.m
-r--------@   1 osxuser  staff  7705 Sep  3 02:30 CF382E58-FA09-400B-A4D5-61C2151F4D85.m
-r--------@   1 osxuser  staff  7281 Sep  2 20:14 CF9D7B36-362C-4542-A7D0-9F65A60E2779.m
-r--------@   1 osxuser  staff  7272 Sep  3 02:02 D09374C9-858A-433D-AC73-85E9B4696E8A.m
-r--------@   1 osxuser  staff  7745 Sep  3 02:35 D1C0B0AC-21C3-407D-B09E-4DAF6936A864.m
-r--------@   1 osxuser  staff  7696 Sep  3 02:32 D2BD8CE2-627E-4537-97CE-0A5C1F74FDFA.m
-r--------@   1 osxuser  staff  8456 Sep  2 14:29 D3A41180-2936-4512-9E16-F4F2995BAE22.m
-r--------@   1 osxuser  staff  7307 Sep  2 20:16 D5ED3ED7-AEC5-4D14-85F6-1D649CFE08C2.m
-r--------@   1 osxuser  staff  8456 Sep  2 17:54 D7FBE5A5-4143-4762-9E00-F3A953B7142D.m
-r--------@   1 osxuser  staff  7518 Sep  3 02:20 DFA0CC0D-BED5-4C74-8EA1-A5DD347EB611.m
-r--------@   1 osxuser  staff  7696 Sep  3 02:28 E3104D98-CDD1-4FF6-B8DB-DBC3A953F1BB.m
-r--------@   1 osxuser  staff  8500 Sep  2 17:45 E5CABED2-B7A4-44E8-BF17-232B2910E720.m
-r--------@   1 osxuser  staff  8576 Sep  2 17:53 E9511890-3581-4065-A750-B62A635ABCD6.m
-r--------@   1 osxuser  staff  8345 Sep  2 14:19 EDFDC771-2478-4094-8F43-59611BADCE56.m
-r--------@   1 osxuser  staff  8454 Sep  2 17:44 F064E858-30E5-41F1-A3ED-B3BF1EA4BBAE.m
-r--------@   1 osxuser  staff  7561 Sep  3 02:22 F0E321ED-EFF3-4602-B983-B86740DE9E44.m
-r--------@   1 osxuser  staff  7718 Sep  3 02:23 F5F33D2F-467D-4008-AAB7-2DDE2B87C034.m
-r--------@   1 osxuser  staff  7485 Sep  3 02:05 F7862B99-12F5-4C13-9380-D09555ED65C4.m
-r--------@   1 osxuser  staff  7964 Sep  3 02:41 FA736635-C118-4E52-BFB5-4A95340D69F6.m
-r--------@   1 osxuser  staff  8569 Sep  2 17:53 FB02F3C4-3021-4B41-9D2C-819AF4B19D5B.m
-r--------@   1 osxuser  staff  7696 Sep  3 02:29 FB4B398E-E161-43E2-867E-1283F9738F9A.m
-r--------@   1 osxuser  staff  8269 Sep  2 14:13 FCD22F66-1E44-4207-B003-EE3F733444B7.m
-r--------@   1 osxuser  staff  7706 Sep  3 02:23 FEA04E2A-A9E0-478C-BD33-86FA9CA1EB10.m

.DocumentRevisions-V100/PerUID/501/f:
total 0
d--x--x--x   3 root     wheel  102 Sep  2 20:21 .
d--x------   8 osxuser  wheel  272 Sep  3 00:04 ..
d--x--x--x  12 root     wheel  408 Sep  3 01:49 com.apple.documentVersions

.DocumentRevisions-V100/PerUID/501/f/com.apple.documentVersions:
total 0
d--x--x--x  12 root     wheel   408 Sep  3 01:49 .
d--x--x--x   3 root     wheel   102 Sep  2 20:21 ..
-r--------@  1 osxuser  staff  8454 Sep  2 20:24 33C8F9B9-761D-4E4D-8F09-7C94FBDA063B.m
-r--------@  1 osxuser  staff  8453 Sep  2 20:22 3A3C2599-AA8E-49AF-B5B7-B79171274484.m
-r--------@  1 osxuser  staff  8454 Sep  2 20:22 592A3A56-C6A1-4369-B2A5-6F0E33C75D70.m
-r--------@  1 osxuser  staff  8456 Sep  3 01:49 5FD49725-01C2-461D-9F6A-56AC6A922F47.m
-r--------@  1 osxuser  staff  8460 Sep  3 01:49 7420DFA4-CAD0-42BD-84DC-7FD76A871427.m
-r--------@  1 osxuser  staff  8456 Sep  2 20:25 8760F6B8-E4D2-4A55-B01B-7317B2F4E12C.m
-r--------@  1 osxuser  staff  8458 Sep  2 20:21 A39610EE-AE10-449D-A746-1073EE6A3C9D.m
-r--------@  1 osxuser  staff  8456 Sep  2 20:25 DFF98137-733D-4ABA-AB56-7B9B455B0AE4.m
-r--------@  1 osxuser  staff  8456 Sep  2 17:54 FD659CC1-80AC-43A6-82F5-418CB922C552.m
-r--------@  1 osxuser  staff  8460 Sep  2 20:21 FE31A5C7-6D94-4DDE-A57A-8480DFA40D16.m

.DocumentRevisions-V100/db-V1:
total 6912
drwx------  4 root  wheel      136 Aug 27 11:55 .
d--x--x--x  7 root  wheel      238 Aug 26 03:06 ..
-rw-r--r--  1 root  wheel    94208 Sep  3 02:00 db.sqlite
-rw-r--r--  1 root  wheel  3444352 Sep  3 02:48 db.sqlite-wal

.DocumentRevisions-V100/staging:
total 0
drwx--x--x  2 root  wheel   68 Sep  3 02:46 .
d--x--x--x  7 root  wheel  238 Aug 26 03:06 ..

What's particularly painful to witness is the long list of Objective-C files. They're repeated here.

.DocumentRevisions-V100/PerUID/501/d/com.apple.documentVersions:
total 0
d--x--x--x  106 root     wheel  3604 Sep  3 02:46 .
d--x--x--x    3 root     wheel   102 Sep  2 14:05 ..
-r--------@   1 osxuser  staff  7329 Sep  3 01:52 017E7B99-7CA3-4691-89E7-550F9BB589B5.m
-r--------@   1 osxuser  staff  8269 Sep  2 14:14 01BB75D7-65D6-402F-BD1A-A8E43566DC3E.m
-r--------@   1 osxuser  staff  7430 Sep  3 02:13 0218F9D5-2658-4A30-A263-5892A35EDBB7.m
-r--------@   1 osxuser  staff  7537 Sep  3 02:07 0309F170-1FA4-439C-8A89-2E743CAAED8D.m
-r--------@   1 osxuser  staff  8456 Sep  2 14:29 04AC4168-778B-4363-A294-B41C75793F55.m
-r--------@   1 osxuser  staff  8438 Sep  2 14:23 059A5A64-4E5C-45E3-81C3-CCBE120E45BD.m
-r--------@   1 osxuser  staff  7700 Sep  3 02:29 06451AC8-DA69-4245-A268-1010C581C1FB.m
-r--------@   1 osxuser  staff  8261 Sep  2 14:05 096522F1-1682-48C0-AEF7-E630A999B04C.m
-r--------@   1 osxuser  staff  8438 Sep  2 14:23 09829802-68F0-4284-94E1-DB35AD7482FD.m
-r--------@   1 osxuser  staff  7706 Sep  3 02:31 09E7FFCD-30C7-49B2-ACC5-4AFEE72AEFBE.m
-r--------@   1 osxuser  staff  8434 Sep  2 14:23 0E321AFF-7DFA-4725-8F1E-97B1A80E5B6E.m
-r--------@   1 osxuser  staff  7228 Sep  1 15:54 100F6527-26AD-4A05-9014-EDAE8BF82BE2.m
-r--------@   1 osxuser  staff  7228 Sep  1 15:54 10F41D72-38BD-4891-901E-F7F3E9577198.m
-r--------@   1 osxuser  staff  8165 Sep  2 14:06 13A410C6-5EEA-4319-B7B0-E0476025B246.m
-r--------@   1 osxuser  staff  7371 Sep  3 02:03 16821BB2-85D5-4E67-B6ED-5595B661825F.m
-r--------@   1 osxuser  staff  7327 Sep  3 01:46 19516BA6-AF8E-4E56-B4C6-7847ED5D66F1.m
-r--------@   1 osxuser  staff  7331 Sep  3 01:50 1C6F60EF-B194-466F-BAA2-144D36632A4E.m
-r--------@   1 osxuser  staff  7745 Sep  3 02:36 1CC9191E-3EA2-4970-828D-793E779040FB.m
-r--------@   1 osxuser  staff  7696 Sep  3 02:29 206FDCD9-C6FD-40C9-AB10-E03C007F3F38.m
-r--------@   1 osxuser  staff  8504 Sep  2 17:45 22D13AB5-0B45-4B55-A3B0-33F50F304536.m
-r--------@   1 osxuser  staff  8456 Sep  2 14:29 243E9869-CBAB-44B5-B767-F5AFEC3CD95F.m
-r--------@   1 osxuser  staff  8433 Sep  2 14:23 263D0E89-1D4B-4574-9E13-08B4010FC9C5.m
-r--------@   1 osxuser  staff  7353 Sep  3 02:00 28ADAC9D-7E48-4F99-A97A-E47A5CB463E9.m
-r--------@   1 osxuser  staff  8152 Sep  2 14:09 29005B79-26C9-4DED-A392-018E135A1D70.m
-r--------@   1 osxuser  staff  7695 Sep  3 02:28 29C6E1E2-B109-471B-9894-9DD3AE974092.m
-r--------@   1 osxuser  staff  8347 Sep  2 14:22 2C15F0B0-7A80-4D90-8687-5B257E920CBA.m
-r--------@   1 osxuser  staff  7562 Sep  3 02:22 310F8A4F-3D46-463D-900B-CD0EA01FECC1.m
-r--------@   1 osxuser  staff  8583 Sep  2 17:53 331B23A0-6988-48C2-B01A-6057F26024C9.m
-r--------@   1 osxuser  staff  7696 Sep  3 02:27 37EE6F0E-2A8E-45A5-9CA7-0AF064452A9A.m
-r--------@   1 osxuser  staff  7467 Sep  3 02:15 3AB2CC3D-7CF6-457D-BD7D-BA0F0103AEEF.m
-r--------@   1 osxuser  staff  7519 Sep  3 02:17 3D2E7FAB-79D3-4ADC-8138-0F4D0F72D78E.m
-r--------@   1 osxuser  staff  8271 Sep  2 14:17 3DB9827D-F439-4152-BAE1-695984C379A1.m
-r--------@   1 osxuser  staff  7423 Sep  3 02:04 44086594-64A5-4926-B663-336C5EA3911D.m
-r--------@   1 osxuser  staff  7325 Sep  3 01:57 44D90AF3-9646-453A-83D2-597EFD927D70.m
-r--------@   1 osxuser  staff  7474 Sep  3 02:15 49FE360A-28FB-420B-A0FE-63FF261622CF.m
-r--------@   1 osxuser  staff  8474 Sep  2 14:29 4D6809CE-1377-4DB0-91D1-B3C42B31D678.m
-r--------@   1 osxuser  staff  7304 Sep  2 20:15 4E2D270E-83B0-4944-9958-476B0ABCF959.m
-r--------@   1 osxuser  staff  7429 Sep  3 02:05 4F8E582F-12BD-4D53-BA27-E2E9F5401F21.m
-r--------@   1 osxuser  staff  8432 Sep  2 14:23 50978D8E-4E1F-439E-A06B-5D64F658B186.m
-r--------@   1 osxuser  staff  7289 Sep  3 01:52 57DC8C39-7C50-4170-A033-7A95414A639B.m
-r--------@   1 osxuser  staff  7565 Sep  3 02:09 5AAFDAB5-CE0A-46C9-A284-A437A2E49125.m
-r--------@   1 osxuser  staff  7535 Sep  3 02:07 5C056CF6-EA41-4A62-A789-743C15188335.m
-r--------@   1 osxuser  staff  8460 Sep  2 14:28 5DBD4112-188B-4607-8235-1C374521E941.m
-r--------@   1 osxuser  staff  7966 Sep  3 02:41 627FEE96-6F7B-4684-904C-F5ADF19CBA69.m
-r--------@   1 osxuser  staff  8280 Sep  2 14:15 630640D4-C099-406E-B4A6-14619A0FD3DE.m
-r--------@   1 osxuser  staff  8456 Sep  2 14:27 6552B468-F8A3-4217-98B4-2DAF01F94394.m
-r--------@   1 osxuser  staff  8152 Sep  2 14:11 670DFA17-EAC7-4A80-84AA-D9B35735E6BE.m
-r--------@   1 osxuser  staff  8456 Sep  2 14:28 67C9BCB7-3833-4F66-A8A2-66430610214E.m
-r--------@   1 osxuser  staff  7310 Sep  2 20:17 6A6F970A-6E3C-427A-84D4-1B2C7DC4E5CE.m
-r--------@   1 osxuser  staff  7429 Sep  3 02:14 6A7F0CA9-2A2E-4BC5-B751-24FAF9A172FF.m
-r--------@   1 osxuser  staff  7699 Sep  3 02:29 6BC1800F-BE99-4866-B6B9-824ECE2D64D0.m
-r--------@   1 osxuser  staff  7333 Sep  3 01:50 6F9FE3B1-7993-4142-822A-CB779575DEF0.m
-r--------@   1 osxuser  staff  7310 Sep  2 20:17 73B66DBE-0075-46F8-95C7-6FAC736A9FD1.m
-r--------@   1 osxuser  staff  7964 Sep  3 02:46 7C711DA1-42CA-4CE6-99B3-1D129600E970.m
-r--------@   1 osxuser  staff  7429 Sep  3 02:05 812D3ED3-DB7F-4719-BFFC-C1DE480BC61D.m
-r--------@   1 osxuser  staff  8357 Sep  1 02:00 82B67D9D-6969-42C7-902A-61DA7B9D5D31.m
-r--------@   1 osxuser  staff  7696 Sep  3 02:25 84DCB954-C0F8-47C1-85D9-DD2FC43E946D.m
-r--------@   1 osxuser  staff  7484 Sep  3 02:05 851F874F-84F6-4964-AF2D-C2321587AB88.m
-r--------@   1 osxuser  staff  8265 Sep  2 14:13 8522A632-1896-437E-A622-3E97A4602E4B.m
-r--------@   1 osxuser  staff  8399 Sep  2 14:24 897318DE-941C-4D5C-9577-A1E7EC306988.m
-r--------@   1 osxuser  staff  8502 Sep  2 17:45 8995F5CE-F954-49E1-8A70-9217CA6BA739.m
-r--------@   1 osxuser  staff  8443 Sep  2 14:22 8BD5F630-ECAE-4E9E-8369-2B6B4483442F.m
-r--------@   1 osxuser  staff  7566 Sep  3 02:09 8F514D6B-3E0C-42A8-878C-236FAB63A224.m
-r--------@   1 osxuser  staff  7696 Sep  3 02:30 92CB9849-CF76-4528-8953-6F77375449EB.m
-r--------@   1 osxuser  staff  7717 Sep  3 02:25 94AE6588-9795-4E9E-97EC-3F943686E257.m
-r--------@   1 osxuser  staff  7808 Sep  3 02:37 9624EC8C-B558-4AFF-91D1-5AEE0DFD2D76.m
-r--------@   1 osxuser  staff  7227 Sep  2 20:12 978E67E5-9ADA-47B4-9BCB-D08C6B29FDE0.m
-r--------@   1 osxuser  staff  7696 Sep  3 02:32 9B4027D0-8C54-4E00-8C32-D824A7A2BC29.m
-r--------@   1 osxuser  staff  7308 Sep  3 01:44 A09643FD-37B6-4EC2-A803-728C42504A59.m
-r--------@   1 osxuser  staff  7486 Sep  3 02:15 A1B19A3E-FF72-414B-8D73-66948BF80074.m
-r--------@   1 osxuser  staff  7308 Sep  2 20:16 A48D69B9-282A-4E7A-AE44-F4BFE158D707.m
-r--------@   1 osxuser  staff  8269 Sep  2 14:15 A7595BDF-F8C7-41A6-957E-92879754A8FA.m
-r--------@   1 osxuser  staff  7273 Sep  3 02:01 AE32D158-137B-4230-9BB4-AD47EADBF210.m
-r--------@   1 osxuser  staff  7310 Sep  3 01:45 B133BC95-E161-425E-9A13-CFAC76A067B0.m
-r--------@   1 osxuser  staff  7708 Sep  3 02:23 BBB8CC9E-2073-4C01-96E7-E3CE864529FA.m
-r--------@   1 osxuser  staff  8152 Sep  2 14:05 BD8F7BCE-9E81-4E29-B8D9-B25D8D28BFDB.m
-r--------@   1 osxuser  staff  7537 Sep  3 02:08 C2A6F18E-CFAA-4C85-9638-59C516D9FD67.m
-r--------@   1 osxuser  staff  7697 Sep  3 02:27 C3A7004F-7964-468E-BDF3-69162962631E.m
-r--------@   1 osxuser  staff  7537 Sep  3 02:09 C5DFD7BC-449C-4AC5-B116-7DE3A6FD2E5F.m
-r--------@   1 osxuser  staff  7308 Sep  2 20:16 C5E136DF-2DDA-4FD7-9026-B76F1E90FF9F.m
-r--------@   1 osxuser  staff  7700 Sep  3 02:29 C9ECCCBB-C50A-4F38-B275-8E699C722976.m
-r--------@   1 osxuser  staff  7281 Sep  2 20:14 CDC06DE4-3788-48FD-9A8A-4C03DFF7D858.m
-r--------@   1 osxuser  staff  7705 Sep  3 02:30 CF382E58-FA09-400B-A4D5-61C2151F4D85.m
-r--------@   1 osxuser  staff  7281 Sep  2 20:14 CF9D7B36-362C-4542-A7D0-9F65A60E2779.m
-r--------@   1 osxuser  staff  7272 Sep  3 02:02 D09374C9-858A-433D-AC73-85E9B4696E8A.m
-r--------@   1 osxuser  staff  7745 Sep  3 02:35 D1C0B0AC-21C3-407D-B09E-4DAF6936A864.m
-r--------@   1 osxuser  staff  7696 Sep  3 02:32 D2BD8CE2-627E-4537-97CE-0A5C1F74FDFA.m
-r--------@   1 osxuser  staff  8456 Sep  2 14:29 D3A41180-2936-4512-9E16-F4F2995BAE22.m
-r--------@   1 osxuser  staff  7307 Sep  2 20:16 D5ED3ED7-AEC5-4D14-85F6-1D649CFE08C2.m
-r--------@   1 osxuser  staff  8456 Sep  2 17:54 D7FBE5A5-4143-4762-9E00-F3A953B7142D.m
-r--------@   1 osxuser  staff  7518 Sep  3 02:20 DFA0CC0D-BED5-4C74-8EA1-A5DD347EB611.m
-r--------@   1 osxuser  staff  7696 Sep  3 02:28 E3104D98-CDD1-4FF6-B8DB-DBC3A953F1BB.m
-r--------@   1 osxuser  staff  8500 Sep  2 17:45 E5CABED2-B7A4-44E8-BF17-232B2910E720.m
-r--------@   1 osxuser  staff  8576 Sep  2 17:53 E9511890-3581-4065-A750-B62A635ABCD6.m
-r--------@   1 osxuser  staff  8345 Sep  2 14:19 EDFDC771-2478-4094-8F43-59611BADCE56.m
-r--------@   1 osxuser  staff  8454 Sep  2 17:44 F064E858-30E5-41F1-A3ED-B3BF1EA4BBAE.m
-r--------@   1 osxuser  staff  7561 Sep  3 02:22 F0E321ED-EFF3-4602-B983-B86740DE9E44.m
-r--------@   1 osxuser  staff  7718 Sep  3 02:23 F5F33D2F-467D-4008-AAB7-2DDE2B87C034.m
-r--------@   1 osxuser  staff  7485 Sep  3 02:05 F7862B99-12F5-4C13-9380-D09555ED65C4.m
-r--------@   1 osxuser  staff  7964 Sep  3 02:41 FA736635-C118-4E52-BFB5-4A95340D69F6.m
-r--------@   1 osxuser  staff  8569 Sep  2 17:53 FB02F3C4-3021-4B41-9D2C-819AF4B19D5B.m
-r--------@   1 osxuser  staff  7696 Sep  3 02:29 FB4B398E-E161-43E2-867E-1283F9738F9A.m
-r--------@   1 osxuser  staff  8269 Sep  2 14:13 FCD22F66-1E44-4207-B003-EE3F733444B7.m
-r--------@   1 osxuser  staff  7706 Sep  3 02:23 FEA04E2A-A9E0-478C-BD33-86FA9CA1EB10.m

DocumentRevisions-V100/PerUID/501/f/com.apple.documentVersions:
total 0
d--x--x--x  12 root     wheel   408 Sep  3 01:49 .
d--x--x--x   3 root     wheel   102 Sep  2 20:21 ..
-r--------@  1 osxuser  staff  8454 Sep  2 20:24 33C8F9B9-761D-4E4D-8F09-7C94FBDA063B.m
-r--------@  1 osxuser  staff  8453 Sep  2 20:22 3A3C2599-AA8E-49AF-B5B7-B79171274484.m
-r--------@  1 osxuser  staff  8454 Sep  2 20:22 592A3A56-C6A1-4369-B2A5-6F0E33C75D70.m
-r--------@  1 osxuser  staff  8456 Sep  3 01:49 5FD49725-01C2-461D-9F6A-56AC6A922F47.m
-r--------@  1 osxuser  staff  8460 Sep  3 01:49 7420DFA4-CAD0-42BD-84DC-7FD76A871427.m
-r--------@  1 osxuser  staff  8456 Sep  2 20:25 8760F6B8-E4D2-4A55-B01B-7317B2F4E12C.m
-r--------@  1 osxuser  staff  8458 Sep  2 20:21 A39610EE-AE10-449D-A746-1073EE6A3C9D.m
-r--------@  1 osxuser  staff  8456 Sep  2 20:25 DFF98137-733D-4ABA-AB56-7B9B455B0AE4.m
-r--------@  1 osxuser  staff  8456 Sep  2 17:54 FD659CC1-80AC-43A6-82F5-418CB922C552.m
-r--------@  1 osxuser  staff  8460 Sep  2 20:21 FE31A5C7-6D94-4DDE-A57A-8480DFA40D16.m

What's interesting (painful) about these files is that they represent files that no longer exist. And yet they're still there on the system, clogging up the works.

But it gets worse: running Xstrings (or strings) on some of those files reveals a bona-fide history of your web surfing and downloading experience. These are things you might want gone in an orderly fashion. But they won't be gone if the ultra-smooth revision system keeps track of it all.

The daemon running the show is referenced at the following path.

/System/Library/LaunchDaemons/com.apple.revisiond.plist

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>HopefullyExitsLast</key>
    <true/>
    <key>KeepAlive</key>
    <true/>
    <key>Label</key>
    <string>com.apple.revisiond</string>
    <key>MachServices</key>
    <dict>
        <key>com.apple.revisiond</key>
        <dict>
            <key>ResetAtClose</key>
            <true/>
        </dict>
    </dict>
    <key>Program</key>
    <string>/System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/Support/revisiond</string>
    <key>RunAtLoad</key>
    <true/>
</dict>
</plist>

As indicated above, the daemon itself is found at the following path.

/System/Library/PrivateFrameworks/GenerationalStorage.framework/Versions/A/Support/revisiond

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>BuildMachineOSBuild</key>
    <string>11D17a</string>
    <key>CFBundleDevelopmentRegion</key>
    <string>English</string>
    <key>CFBundleExecutable</key>
    <string>GenerationalStorage</string>
    <key>CFBundleIdentifier</key>
    <string>com.apple.GenerationalStorage</string>
    <key>CFBundleInfoDictionaryVersion</key>
    <string>6.0</string>
    <key>CFBundleName</key>
    <string>GenerationalStorage</string>
    <key>CFBundlePackageType</key>
    <string>FMWK</string>
    <key>CFBundleShortVersionString</key>
    <string>1.0</string>
    <key>CFBundleSignature</key>
    <string>????</string>
    <key>CFBundleVersion</key>
    <string>126.1</string>
    <key>DTCompiler</key>
    <string>com.apple.compilers.llvm.clang.1_0</string>
    <key>DTPlatformBuild</key>
    <string>11D17a</string>
    <key>DTPlatformVersion</key>
    <string>GM</string>
    <key>DTSDKBuild</key>
    <string>11D17a</string>
    <key>DTSDKName</key>
    <string></string>
    <key>DTXcode</key>
    <string>0410</string>
    <key>DTXcodeBuild</key>
    <string>11D17a</string>
</dict>
</plist>

'Generational Storage' - the system is growing in complexity by leaps and bounds.

So yes in theory it's possible to 'disable' the system by doing something to that file and then rebooting. (But don't try this at work unless you're a true guerilla, you really know what you're doing, and you're prepared for the consequences.)

How had the user experience engineers at Apple planned to deal with the buildup? Is that documented anywhere? Or perhaps they don't want to worry about it? It's cutely kept out of user reach in a directory owned by root:wheel with access 111, so not many end users will know how to get at it. And 'out of sight, out of mind'. 10.7 had at least three apps that conform to the new world order: Preview, TextEdit, and Xcode. Preview and TextEdit will still perform to an extent if the system is disabled but Xcode burps. And none of those apps will tell you how to review all the document revisions you have.

Here's a tutorial from Apple on how the revision system works.

http://support.apple.com/kb/HT4753

The obvious privacy concerns arrived over a year ago.

https://discussions.apple.com/thread/3198808?start=30

But rather than discuss how the system can be turned off (it can) the posts are mostly about encrypting entire hard drives instead. And that doesn't answer the obvious questions. Already on page 1 'Pondini' notes that the system officially cannot be turned off.

https://discussions.apple.com/thread/3198808



This of course gets even hairier when you think of all the Unix administrative tools that have just 'sort of been forgot' in the rush to dumb down users even more. Surfsoft's remark about Dave Cutler's VMS is spot on.



Bottom line: the OS X revision system, albeit highly complex and sophisticated, has a type of 'devil may care attitude': things don't always hold so good, too much data is hidden out of view (and reach) of the user, and too much potentially compromising rubbish just accumulates and accumulates.

And it's out of view of the user! How many users keep close tabs on disk free space and notice that there's something going on?

The point of course is that your computer in the wrong hands will reveal a lot of things you didn't want revealed. UDIDs can be the least of your concerns.

[Yes there are CLIX commands available below that will remedy this. Ed.]

3. Preheated User

One of the most aggravating features of the lions is the 'saved application state' that rears its head on login. This very helpful feature has no clue how you used your apps before rebooting, doesn't understand that some (most) apps are document-based Cocoa apps, meaning they need a file name too, and so forth. Being greeted by empty document windows on login is not a great thrill. Fortunately you can limit this to a certain extent - just make sure the right steps are taken immediately prior to hitting that reboot button.

sudo rm -f /var/db/BootCaches/PreheatedUser/*

'PreheatedUser' is actually a symlink to the real directory where all this lovely information is being stored for your pleasure. To read what's there before you send it on its way into outer space, use the following command.

sudo ls -al /var/db/BootCaches/PreheatedUser/*

Then ask yourself how many of those apps you really wanted Apple to keep track of so they could be started up again.

The 'playlist' files are in another totally proprietary format and seem to have a quad magic at offset 0.

$ hexdump app.com.apple.Safari.playlist
0000000 d8 c3 b2 a1 01 00 00 00 32 00 00 00 aa 02 02 09
0000010
$ hexdump app.com.apple.Terminal.playlist
0000000 d8 c3 b2 a1 01 00 00 00 78 01 00 00 aa 02 02 09
0000010

More data being hidden from the computer owner.

4. Lockfiles

Lockfiles are more clutter to an increasingly cluttered ~/Library/Preferences directory whose functionality should have been implemented using available synchronisation objects such as critical sections and mutexes. Preferences is supposed to afford a modicum of user control - this in stark contrast to the nightmarish Microsoft Windows Registry.

But when visibility of the parent directory ~/Library is jeopardised already 'out of the box'...

Be grateful you're on a system where preferences are stored in separate app-specific files, and not a huge ungainly binary blob where a misalignment of a single byte can bring the whole system crashing down. Be grateful you're on a system where it is still possible to view and edit those preferences files as plain text.

But don't be grateful that the thirty or so preference files you really need are hidden like needles in a stack of needles on 10.7 or better. For every genuine preference file with the extension 'plist' you're likely to find three more related files cluttering up.

[A curiosity on 10.7 is how 'lockfiles' get execution privileges. Surely this is a mere oversight on Apple's part? Ed.]

'Lockfiles' are normally of zero size: they're used to avoid writing conflicts when preferences files are being updated. That's the official storyline. Their names add 'lockfile' as a further extension to the name of the target preference file.

'Lockfiles' can be found in /Library/Preferences, ~/Library/Preferences, and ~/Library/Preferences/ByHost. The latter two areas are where users can be expected to need to get in from time to time.

Obviously it's easy to construct a script to get rid of 'lockfiles' should one so wish.

5. Safari 6 Keys

Safari 6 is today an impossibly svelte executable.

$ ls -al
total 32
drwxr-xr-x   4 root  wheel    136 Jul 29 16:52 .
drwxr-xr-x  10 root  wheel    340 Jul 29 16:52 ..
-rwxr-xr-x   1 root  wheel  34384 Jul 29 16:37 Safari
-rwxr-xr-x   1 root  wheel  34848 Jul 29 16:37 SafariForWebKitDevelopment

The key is all the 'guts' have been moved to a framework instead.

0000000000001460 /System/Library/PrivateFrameworks/Safari.framework/Versions/A/Safari

That file has all the goodies.

$ ls -al
total 8840
drwxr-xr-x   5 root  wheel       170 Jun  2 03:18 .
drwxr-xr-x   4 root  wheel       136 Jun  2 03:18 ..
drwxr-xr-x  84 root  wheel      2856 Jun  2 03:18 Resources
-rwxr-xr-x   1 root  wheel  13890480 Jun  2 03:10 Safari
drwxr-xr-x   3 root  wheel       102 Jun  2 03:18 _CodeSignature

Inspecting that binary yields 131850 strings of varying importance - 52 related to Safari and WebKit(2) settings. They're in a CLIX file of their own, together with a command that lists all settings for the application.

6. systemsetup

Also included is a CLIX file with 28 new systemsetup commands. systemsetup is described in its documentation as a 'configuration tool for certain machine settings in System Preferences'. Two commands offer basic help and a list of all the commands available. Using the 'get' rather than the 'set' variations of these commands should be innocuous (and hopefully informative as well).

7. Guerilla CLIX Files

The CLIX files for this article are available here. Do not use these scripts unless you are fully capable of understanding them and the consequences of running them. By downloading this file, you agree to assume full responsibility for those consequences.

See Also
CLIX: 'The #1 Power Tool for OS X'/Learn How to Fish

Learning Curve: CLIX: Legally Hacking I
Learning Curve: CLIX: Legally Hacking II

The Technological: Apple's Achilles Heel
The Technological: Apple and the War on Stupidity
Industry Watch: Flashback Botnet Recruits 550,000 Macs

About | ACP | Buy | Industry Watch | Learning Curve | News | Products | Search | Substack
Copyright © Rixstep. All rights reserved.