Alan Siu – English teacher to Munki tamer

Published: 2025-05-30
avatar
MatX
avatar
JD Strong

In this episode, we engage in an insightful discussion with Alan Siu, a prominent figure in the Mac admin space, who shares his experiences and thoughts about the evolving landscape of technology and open source software. Alan reflects on how the introduction of devices like the iPod marked a significant transition in how we consume music, shifting from ownership towards streaming, which has fundamentally altered the way we think about our digital collections.

We delve into the nostalgia of owning physical media, comparing the past practices of music and comic book collection to today’s digital landscape where ownership is becoming increasingly abstract. Alan recounts his own journey, including his extensive collection of CDs and comic books, and discusses how digitizing these collections has changed his relationship with music and media. This naturally leads us to the topic of comics and graphic novels, where Alan draws parallels between the artistic elements of graphic novels and their storytelling prowess, illustrating how they have evolved over the years.

As the conversation progresses, Alan provides an origin story detailing how he transitioned from a high school English teacher to becoming deeply entrenched in IT, particularly working with open source tools like Munki. He expresses the community’s supportive nature and reflects on how this niche of Mac admins has transformed over the years, specifically highlighting the collaborative spirit that drives innovation and problem-solving within the community.

Alan shares his experiences with various tools and software for managing Macs, comparing Munki with other emerging solutions like Installomator. He discusses the unique benefits of different tools and emphasizes the importance of having a wide variety of resources available to Mac admins, which helps tackle the nuanced challenges they face in today’s environments.

In addition, the discussion touches on Apple’s approach to enterprise support, the introduction of new security features, and how they affect the workflows of Mac administrators. Alan articulates the camaraderie found within the Mac admin community, fostering a culture of shared knowledge that is often absent in other tech spheres. This shared understanding and mutual support enable the community to adapt and respond swiftly to changes introduced by Apple.

We wrap up by celebrating the upcoming Mac DevOps YVR conference, where Alan will present and engage with fellow professionals. He expresses his excitement about contributing to the community and highlights the value of in-person connections that conferences facilitate. Alan emphasizes the importance of these gatherings not just for learning, but for building relationships and exchanging innovative ideas that keep the Mac admin community vibrant and dyamic.

Chapters

1:07 The Evolution of Music Ownership
1:20 The Struggle of Collecting Media
1:54 From Comics to Digital Mediums
4:46 The Rise of Graphic Novels
6:32 Welcome to the Mac DevOps Podcast
9:35 The Journey into IT
13:03 Learning Through Open Source
16:02 The Community of Mac Admins
24:09 Navigating Apple’s Changes
28:21 The State of macOS Today
31:07 Apple’s Internal Communication
34:23 Adapting to New Challenges
35:35 The Value of Community
38:14 Planning for Quick Talks
42:15 Looking Forward to the Conference

SPONSOR: Special shout-out to MacStadium as our MDOYVR 2025 Welcome Reception sponsor. Join us June 11, 2025 at 5:30 PM – see https://mdoyvr.com/ for more details

References:

Wade Robson s3 middleware (GitHub – waderobson/s3-auth: Generate s3 authentication headers for munki)

Alan Siu’s Blog

Installomator (GitHub – Installomator/Installomator: Installation script to deploy standard software on Macs)

Autopkg (GitHub – autopkg/autopkg: Automating packaging and software distribution on macOS)

Links to some Munki related talks at MDO over the years:

MDOYVR19 – Greg Neagle – A Swift Adventure – Moving from Python to Swift

https://youtu.be/lm250uuozYM

MDOYVR19 – Graham Gilbert – Munki Repo in 3 Mins

https://youtu.be/Sr5-FoFLpnA

MDOYVR24 – Martin Leger – Future Proofing MunkiWebAdmin2 (Quick Talk)

https://youtu.be/5F6a7kK3Oso

MDOYVR22 – Rod Christiansen – MunkiMDM (Quick Talk)

https://youtu.be/0CY2kqF5tTA

MDOYVR21 – Hannes Juutilainen – Munki Admin – Tips and Tricks

https://youtu.be/7sVQRKnADr4

MDOYVR16 -Wade Robson – Munki Middleware

https://youtu.be/BI39n-lxl5k

MDOYVR15 – Wade Robson – Hack your Mac into Munki or Casper (Jamf Pro)

https://youtu.be/SKoMWwwIjXA

MDOYVR17 – Greg Neagle – Munki 3

https://youtu.be/Jgsw0iifIIA

MDOYVR15 – Greg Neagle – Getting started with Munki

https://youtu.be/rWWzaqM-LHU

MDOYVR15 – Mike Dodge – Chef and Munki at Scale

https://youtu.be/my5ZsoL8g5U

MDOYVR15 –  Sam Keeley – Munki and Friends Git under Control

https://youtu.be/soZml2rca2U

MDO Socials

Please follow our accounts on Mastodon, Twitter or Facebook for news and updates:

Researching vulnerabilities with Csaba Fitzl

Published: 2025-05-22

In this episode, we dive deep into the dynamics of security and development in the Apple ecosystem, featuring insights from cybersecurity expert Csaba Fitzl. We discuss the fascinating yet complex world of Electron apps and their inherent vulnerabilities, using Discord as a prime example of how these issues can persist over time despite being reported. This sets the stage for a broader conversation about application security and the implications of developing cross-platform software that sacrifices security for convenience.

With a wealth of experience in vulnerability research, Csaba shares his journey from network management to ethical hacking. He recounts how a week-long training transformed his perception of security, igniting his passion for discovering system vulnerabilities. This background plays a pivotal role in his approach to security, where understanding infrastructure aids significantly in identifying flaws and weaknesses in applications.

The conversation then pivots to a critical topic: Apple’s security entitlements. Csaba evaluates the balance Apple strikes between protecting users and providing developers with the access needed to build secure applications. He elaborates on the systemic measures Apple has implemented to mitigate vulnerabilities, which often complicate the developer experience but ultimately result in a more secure ecosystem.

We also touch on the personal impact of physical device security. Csaba emphasizes how advancements in iOS security protocols have significantly deterred casual theft, making stolen devices virtually unusable. This leads to a broader discussion about threat models, illustrating how different levels of targeted attacks require varying defensive measures, especially in a world where both sophisticated and untrained actors exist.

Csaba draws attention to his recent experiences with AI tools, which he initially approached with skepticism. He explains how these technologies have revolutionized his workflow, particularly in automation and reverse engineering tasks. By leveraging AI, he has been able to improve the quality of his code analysis and enhance his vulnerability discovery process, albeit while recognizing the limitations and risks associated with AI-generated outputs.

As the episode progresses, we delve into the importance of community in the security landscape. Csaba passionately advocates for attending conferences like Mac DevOps YVR, highlighting the invaluable networking opportunities and the familial atmosphere within the Mac-centric community. He insists that while recorded talks provide great content, the personal connections and discussions that happen in the hallways are what truly enrich the conference experience.

In closing, Csaba shares his enthusiasm for continuing to navigate the evolving field of cybersecurity, expressing a firm belief in the value of collaborative learning and sharing knowledge. His passion for his work and outdoor pursuits in the mountains showcase a well-rounded approach to life that encourages us all to find a balance between professional growth and personal well-being.

Chapters

0:12 Discord Dilemmas
1:57 Welcome to MacDevOps YVR Podcast
2:03 Conference Connections
4:05 Mountain Adventures
6:04 Security Talk Begins
10:45 Entitlements and Apple Security
19:56 Reporting Vulnerabilities
23:20 Daily Life of a Researcher
24:50 AI in Research
29:50 Importance of Community
34:37 Closing Thoughts

Links:

MDOYVR24 – Mykola Grymalyuk – Electron Security: Making your Mac a worse place?

MDOYVR22 – Csaba Fitzl -10 macOS Persistence Techniques

Csaba’s Shield app (GitHub)

Csaba’s blog the Evil Bit

Csaba AKA “The Evil Bit” on X

Apple’s Endpoint Security (documentation)

Evil bit blog – Launch constraints deep dive

Report a security or privacy vulnerability to Apple

Apple Security Research

Apple Security Bounty

Kandji endpoint detection response (EDR)

Kees and Clare Memorial Hut

MDO Socials

Please follow our accounts on Mastodon, Twitter or Facebook for news and updates:

Continuous Improvements to CI/CD with Rod Christiansen

Published: 2025-05-16
avatar
MatX
avatar
JD Strong

Mat X, JD, and special guest Rod Christensen from Emily Carr University invite you to the next exciting chapter of the MacDevOps YVR podcast. In this episode, the conversation spans across the adoption of DevOps practices in managing Macs, ongoing experiences with various software tools, and the shared thrill of transforming workflows into more efficient systems. It’s an engaging mix of personal anecdotes, technical insights, and lively banter that showcases how fostering collaboration within the tech community can lead to innovation and success.

Summary

In this episode, Mat and JD welcome Rod Christensen back to the show, where he shares his journey in revamping infrastructure for managing devices using open-source solutions and cloud platforms. Their dialogue dives deep into Rod’s implementation of a DevOps model at Emily Carr, highlighting how he transitioned both Mac and Windows infrastructures into synchronized, cloud-based operations. Rod discusses the excitement of leveraging Azure DevOps, the intricacies of using CI/CD pipelines, and the push towards automation for a more standardized workflow. Furthermore, they touch on the importance of documentation and knowledge sharing within teams to ensure processes remain streamlined and intelligible for all members.

The light-hearted camaraderie between the hosts and Rod makes this episode both informative and entertaining, featuring practical advice on everything from implementing security measures in cloud environments to the necessity of continuous integration and deployment for modern IT operations. As they gear up for the MacDevOps conference, they also extend an invitation to listeners, encouraging them to join the thriving community dedicated to improving Mac management and DevOps practices.

Featured Highlights:

  • Rod’s long relationship with the MacDevOps conference and his involvement over the years.
  • The challenges and successes Rod faced as he implemented AWS and Azure solutions during the pandemic.
  • Practical experiences around CI/CD, including the benefits of Azure DevOps and how it simplifies workflow management.
  • Importance of documentation and creating an internal handbook to assist team members with their daily tasks.
  • Rod’s plans to start a blog, titled Focused Systems, where he will share his insights and resources for the community.

Chapters:

0:20 Introduction to MacDevOps YVR Podcast
1:35 Guest Introduction: Rod Christensen
2:52 Discussing Cloud Technologies
5:20 Transitioning to Azure
7:18 Revamping Workflows with Git and CI/CD
11:17 Challenges and Solutions in Device Management
17:01 Importance of Documentation
18:21 Team Dynamics and Communication
22:05 Exploring Azure DevOps
26:00 Transitioning to Intune
30:32 Future Plans and Innovations
34:42 Closing Remarks and Resources

Related Links:

MDO Socials

Please follow our accounts on Mastodon, Twitter or Facebook for news and updates:

Giving back to the community with Mike Meyer

Published: 2025-05-09

Welcome to the Mac DevOps YVR Podcast! Join Mat X, JD, and a special lineup of guests as they dive into the world of managing Macs through open source software—all in the vibrant city of Vancouver, British Columbia. Our podcast series serves as a platform for discussions surrounding the Mac DevOps YVR conference, a unique gathering designed to foster collaboration among IT professionals and developers to tackle challenges within the community. With insights from speakers and industry experts, we aim to encourage and inspire developers to explore new solutions and innovations. For more information about the conference, visit our website at [mdoyvr.com](https://mdoyvr.com).

In this episode, we are thrilled to announce the kickoff of the preparations for Mac DevOps 2025. Mat X and JD reflect on the ups and downs of organizing this event—now in its 11th year—alongside the enthusiastic support of fellow contributors like Nick Z., and Jessica, our talented graphic designer. As the planning unfolds, they engage in light-hearted banter while acknowledging the hard work that goes into creating such an exciting, three-day experience for attendees.

We also welcome Mike Meyer as our special guest, who shares his journey from being a theater major to stepping into the tech world, all the while navigating the complexities of Mac products, security, and DevOps. Mike’s passion for public speaking shines as he reveals how he is preparing to present at this year’s conference. Through anecdotes and personal reflections, he illustrates how attending previous conferences inspired him to give back to the Mac admins community, paving the way for his forthcoming talk that promises to blend AI with innovative workflow management.

Listeners can expect to hear about Mike’s transition from Jamf Pro to Fleet, a tool he describes as pivotal in enhancing his team’s device management capabilities. Together with Mat X, Mike discusses the merits of adapting to change within the tech landscape and how approaching problems creatively can invigorate workflows. Their conversation encompasses themes of community support, the importance of mentorship, and a collective enthusiasm for sharing knowledge—the very core of what makes the Mac DevOps conference a standout event.

As the episode draws to a close, the trio emphasizes the significance of creating a welcoming atmosphere at the conference, full of opportunities for networking, collaboration, and learning through quick talks and open discussions. Mike encourages those considering attending to think of Mac DevOps as a more intimate and engaging version of larger tech gatherings, with the added benefit of being situated in beautiful Vancouver.

Excited for the upcoming conference, the hosts wrap up the show by sharing where to find them online, and special gratitude is given to our sponsors who help make the event—and this podcast—possible. Don’t miss out on the dynamic conversations and innovative ideas featured on the Mac DevOps YVR Podcast—be part of our enthusiastic community!

For additional details about participation, sponsorship, or just to stay connected, visit the conference website [https://mdoyvr.com](https://mdoyvr.com) and let’s keep the momentum going as we gear up for Mac DevOps 2025!

Chapters

0:01 Introduction to Mac DevOps 2025
1:58 Welcoming Our Special Guest
4:42 Mike Meyer’s Journey
14:08 Life at Foursquare
20:09 Transitioning to Fleet
24:38 Open Source Projects in Focus
27:09 Music and the Mac Community
28:16 The Conference Experience
31:50 Building Community Connections
34:01 Thank You and Sign Off

Links:

MDO Speakers list

MDO schedule 

Seattle-Apple-Admins

Tech Debt definition

Vibe coding definiton

Fleet device management 

Jamf Pro

Fleet GitHub 

GitOps definition 

Infrastructure as code defini

Osquery (open source security)

Yo notification tool by Shea Craig

Swift dialog GitHub 

MacAdmins Slack

MDO Socials

Please follow our accounts on Mastodon, Twitter or Facebook for news and updates:

MDOYVR 2025

Published: 2024-12-12

Mat X, Nick and JD turn it up to eleven for MDOYVR 2025. Join us in beautiful Vancouver, British Columbia June 11-13, 2025 for the 11th annual MDOYVR! Call for Attendees, Speakers and Sponsors. Quicktalks always welcome.

2025 MDO conference website

Howard Oakley’s Eclectic Light blog

MDO 2024 Quick Talks:

MDO Socials

Please follow our accounts on Mastodon, Twitter or Facebook for news and updates:

MDOYVR 2024 recap

Published: 2024-07-08

Mat X, Nick Z and JD recount MDOYVR 2024 and encourage your feedback as we begin planning MDOYVR 2025. Quick Talks always welcome.

Super secret MDOYVR 2024 shirt

https://www.customink.com/fundraising/secret-mdo-t-shirt

Thank you to all our great MacDevOps:YVR 2024 sponsors! MacStadium, Fleet, SimpleMDM, Workbrew and DBQ Technology 

MDO Socials

Please follow our accounts on Mastodon, Twitter or Facebook for news and updates:

OpenCore Legacy Patcher with Mykola Grymalyuk

Published: 2024-06-09

Mat X and JD are joined by Mykola Grymalyuk to discuss how he got into creating Open Core Legacy Patcher, getting into security and trying to unravel Apple Silicon VMs. Check out his security talk at MacDevOps:YVR 2024

https://github.com/khronokernel

https://khronokernel.com/

Apple Silicon and Virtual Machines: Custom Serials, DEP Enrolment and the Secure Enclave

Csaba Fitzl: “Secure coding XPC services” blog series

Google’s Project Zero

Jamf’s Compliance Editor

SecondSon Consulting’s Baseline project

SwiftDialog project

 

Thank you to all our great MacDevOps:YVR 2024 sponsors! MacStadium, Fleet, SimpleMDM, Workbrew and DBQ Technology 

Sponsors

MDO Socials

Please follow our accounts on Mastodon, Twitter or Facebook for news and updates:

https://mastodon.social/@mdoyvr

https://twitter.com/MacDevOpsYVR

https://www.facebook.com/MacDevOpsYVR

MDO Socials

Please follow our accounts on Mastodon, Twitter or Facebook for news and updates:

SwiftDialog with Bart Reardon

Published: 2024-05-29

MacDevOps:YVR 2024 conference is June 19-21, 2024. Mat X and JD are joined by Bart Reardon to chat about his open source project Swift Dialog, using SwiftUI and running an open source project.

swiftDialog

Swift Dialog documentation 

Projects that use swift Dialog

Thank you to all our great MacDevOps:YVR 2024 sponsors! Fleet, SimpleMDM and Workbrew  

Sponsors

MDO Socials

Please follow our accounts on Mastodon, Twitter or Facebook for news and updates:

https://mastodon.social/@mdoyvr

https://twitter.com/MacDevOpsYVR

https://www.facebook.com/MacDevOpsYVR

MDO Socials

Please follow our accounts on Mastodon, Twitter or Facebook for news and updates:

Aftermath with Stuart Ashenbrenner

Published: 2024-05-14

Mat X and JD are joined by Stuart Ashenbrenner, macOS Security Researcher at HuntressLabs, to discuss Aftermath, a Swift-based, open-source incident response framework, and being a Millennial Girl Dad.

MacDevOps:YVR 2024 conference is June 19-21, 2024.

Acronym expansion:

EDREndpoint detection and response

Video:

MDO YVR 2023 – (dm)XProtect: Stop, Drop, Shut malware down before it opens up shop 

MDO Socials

Please follow our accounts on Mastodon, Twitter or Facebook for news and updates:

https://mastodon.social/@mdoyvr

https://twitter.com/MacDevOpsYVR

https://www.facebook.com/MacDevOpsYVR

MDO Socials

Please follow our accounts on Mastodon, Twitter or Facebook for news and updates:

10th Anniversary conference

Published: 2023-12-13

Our tenth anniversary edition of MacDevOps:YVR is next June 2024. Planning and preparations have already begun. Mat X and JD are joined by Nick Zolotko,  one of our amazing behind the scenes organizers for the tenth annual MDOYVR Conference.

MDOYVR 2023 call for speakers

MDO Socials

Please follow our accounts on Mastodon, Twitter or Facebook for news and updates: