Submit Hint Search The Forums LinksStatsPollsHeadlinesRSS
14,000 hints and counting!

10.5: Avoid using ServiceScrubber with 10.5's signed apps Apps
I recently have had problems where Safari and Mail would not remember passwords (basic HTTP authentication, POP, IMAP) even though I would check the 'keep on Keychain' box when re-entering them. I was always prompted over and over again. Numerous searches yeilded various fixes, none of which worked. I was about to give up when I stumbled upon this discussion from the MacOSXHints forum, which led to this thread on the Apple Discussions site. (Oddly, that thread never showed up in my Apple Discussion searches.)

The fix for my particular problem was to reinstall Safari and Mail because I had used Service Scrubber on them. Other people appear to have fixed the problem by restoring from Time Machine, but I had to find the individual packages on the Leopard install disc, because my oldest Time Machine versions were also affected by my too-liberal use of Service Scrubber. This blog entry explains the causes better than I can. Obviously, I cannot claim any credit for discovering the solution, but I thought a hint here might help others avoid or recover from this problem.

[robg adds: Basically, the problem is that ServiceScrubber does its thing by modifying the info.plist files within each program's bundle. In 10.5, the Apple applications are all "signed" to help prevent a hacker from successfully modifying the code...but the side effect is that programs like ServiceScrubber will also result in Safari, Mail, etc. believing they've been "hacked," and preventing access to the keychain.]
    •    
  • Currently 3.00 / 5
  You rated: 5 / 5 (8 votes cast)
 
[11,002 views]  

10.5: Avoid using ServiceScrubber with 10.5's signed apps | 9 comments | Create New Account
Click here to return to the '10.5: Avoid using ServiceScrubber with 10.5's signed apps' hint
The following comments are owned by whoever posted them. This site is not responsible for what they say.
10.5: Avoid using ServiceScrubber with 10.5's signed apps
Authored by: seanwolter on Jan 15, '08 08:27:08AM

THANK YOU for figuring this out. This password problem has been driving me crazy!



[ Reply to This | # ]
10.5: Avoid using ServiceScrubber with 10.5's signed apps
Authored by: jbarley on Jan 15, '08 09:52:45AM

Leopard users - rejoice...
Service Scrubber has been updated for Leopard, it now will not touch signed apps.



[ Reply to This | # ]
10.5: Avoid using ServiceScrubber with 10.5's signed apps
Authored by: jbarley on Jan 15, '08 09:54:22AM
Figures!
Authored by: jecwobble on Jan 16, '08 12:35:36PM

I finally get the problem fixed, and on the day that my hint gets published, they release a fix! ;-)



[ Reply to This | # ]
10.5: Avoid using ServiceScrubber with 10.5's signed apps
Authored by: moonhawk on Jan 15, '08 01:42:31PM

It would make sense if Leopard warned users that an application appears to have been hacked. I've been retyping my passwords in Mail.app for the past few days, trying to figure out the problem. If it's a security issue, then the app should appropriately warn users before having them re-type in their password...



[ Reply to This | # ]
10.5: Avoid using ServiceScrubber with 10.5's signed apps
Authored by: Fairly on Jan 16, '08 04:45:25AM

I don't think they want to help the criminals either with too much information. It's basically a good security move as the idea with the keychain is dependent on the authenticity of the bundle ID and therefore flawed. But the clutter of the service menu - they have to do something. I don't need a Chinese text converter.



[ Reply to This | # ]
ServiceScrubber fixed for future use
Authored by: earthsaver on Jan 15, '08 06:43:42PM
Now available is an update to ServiceScrubber 1.1.4, which no longer fixes Apple signed apps in Leopard.

---
- Ben Rosenthal
PBG4 1.25 - Leopard

[ Reply to This | # ]

10.5: Avoid using ServiceScrubber with 10.5's signed apps
Authored by: tearatarrows on Jan 16, '08 06:31:32AM

thank you so much for this hint.
I created an account here just to thank you john. i almost reinstalled 10.5 to fix this.
do you have to reinstall the whole package or is pasting the plist file enough to fix this?



[ Reply to This | # ]
10.5: Avoid using ServiceScrubber with 10.5's signed apps
Authored by: jecwobble on Jan 16, '08 12:38:44PM

You'll have to try pasting and see. For me, I didn't have a clean Info.plist to use, so I installed the actual Safari.mpkg and Mail.mpkg files (or were they just .pkg?).



[ Reply to This | # ]