Pick of the Week - Nov 10 [Show all picks]
Path Finder 5 - A feature-laden Finder replacement
Submit Hint Search The Forums LinksStatsPollsFAQHeadlinesRSS
12,000 hints and counting!

10.5: Avoid using ServiceScrubber with 10.5's signed apps Apps
I recently have had problems where Safari and Mail would not remember passwords (basic HTTP authentication, POP, IMAP) even though I would check the 'keep on Keychain' box when re-entering them. I was always prompted over and over again. Numerous searches yeilded various fixes, none of which worked. I was about to give up when I stumbled upon this discussion from the MacOSXHints forum, which led to this thread on the Apple Discussions site. (Oddly, that thread never showed up in my Apple Discussion searches.)

The fix for my particular problem was to reinstall Safari and Mail because I had used Service Scrubber on them. Other people appear to have fixed the problem by restoring from Time Machine, but I had to find the individual packages on the Leopard install disc, because my oldest Time Machine versions were also affected by my too-liberal use of Service Scrubber. This blog entry explains the causes better than I can. Obviously, I cannot claim any credit for discovering the solution, but I thought a hint here might help others avoid or recover from this problem.

[robg adds: Basically, the problem is that ServiceScrubber does its thing by modifying the info.plist files within each program's bundle. In 10.5, the Apple applications are all "signed" to help prevent a hacker from successfully modifying the code...but the side effect is that programs like ServiceScrubber will also result in Safari, Mail, etc. believing they've been "hacked," and preventing access to the keychain.]
    •    
  • Currently 0.00 / 5
  • 1
  • 2
  • 3
  • 4
  • 5
  (0 votes cast)
 
[6,648 views]  

10.5: Avoid using ServiceScrubber with 10.5's signed apps | 9 comments | Create New Account
Click here to return to the '10.5: Avoid using ServiceScrubber with 10.5's signed apps' hint
The following comments are owned by whomever posted them. This site is not responsible for what they say.
10.5: Avoid using ServiceScrubber with 10.5's signed apps
Authored by: seanwolter on Tue, Jan 15 2008 at 8:27AM PST
THANK YOU for figuring this out. This password problem has been driving me crazy!

[ Reply to This | # ]
10.5: Avoid using ServiceScrubber with 10.5's signed apps
Authored by: jbarley on Tue, Jan 15 2008 at 9:52AM PST
Leopard users - rejoice...
Service Scrubber has been updated for Leopard, it now will not touch signed apps.

[ Reply to This | # ]
10.5: Avoid using ServiceScrubber with 10.5's signed apps
Authored by: jbarley on Tue, Jan 15 2008 at 9:54AM PST
Figures!
Authored by: jecwobble on Wed, Jan 16 2008 at 12:35PM PST
I finally get the problem fixed, and on the day that my hint gets published, they release a fix! ;-)

[ Reply to This | # ]
10.5: Avoid using ServiceScrubber with 10.5's signed apps
Authored by: moonhawk on Tue, Jan 15 2008 at 1:42PM PST
It would make sense if Leopard warned users that an application appears to have been hacked. I've been retyping my passwords in Mail.app for the past few days, trying to figure out the problem. If it's a security issue, then the app should appropriately warn users before having them re-type in their password...

[ Reply to This | # ]
10.5: Avoid using ServiceScrubber with 10.5's signed apps
Authored by: Fairly on Wed, Jan 16 2008 at 4:45AM PST
I don't think they want to help the criminals either with too much information. It's basically a good security move as the idea with the keychain is dependent on the authenticity of the bundle ID and therefore flawed. But the clutter of the service menu - they have to do something. I don't need a Chinese text converter.

[ Reply to This | # ]
ServiceScrubber fixed for future use
Authored by: earthsaver on Tue, Jan 15 2008 at 6:43PM PST
Now available is an update to ServiceScrubber 1.1.4, which no longer fixes Apple signed apps in Leopard.

---
- Ben Rosenthal
PBG4 1.25 - Leopard

[ Reply to This | # ]

10.5: Avoid using ServiceScrubber with 10.5's signed apps
Authored by: tearatarrows on Wed, Jan 16 2008 at 6:31AM PST
thank you so much for this hint.
I created an account here just to thank you john. i almost reinstalled 10.5 to fix this.
do you have to reinstall the whole package or is pasting the plist file enough to fix this?

[ Reply to This | # ]
10.5: Avoid using ServiceScrubber with 10.5's signed apps
Authored by: jecwobble on Wed, Jan 16 2008 at 12:38PM PST
You'll have to try pasting and see. For me, I didn't have a clean Info.plist to use, so I installed the actual Safari.mpkg and Mail.mpkg files (or were they just .pkg?).

[ Reply to This | # ]