2 Port System

0 views
Skip to first unread message

Awilda

unread,
Aug 4, 2024, 11:25:54 PM8/4/24
to piowoofeva
Whyis Control Center on Monterey listening to port 5000 and port 7000? I have used these ports for years for local development, but now find them in use by Control Center. Is this worth filling a Feedback about?

The Remote Audio Output Protocol, AKA AirTunes, AKA AirPlay, has been using port 5000 since the year 2004. This is nothing new. All AirPlay receivers including AirPort Express and Apple TV use port 5000. If you've ever used Airfoil on your Mac (Airfoil Speakers was released in 2008), that also uses 5000 for the same reason. AirPlay receiving is new to macOS Monterey, but AirPlay itself is very old, predating Flask and these other web development environments. No, Apple is not trying to make web development difficult.


It seems that port number 5000 was never officially registered with IANA, and has many more conflicts.Can we kindly ask Apple to register their service ports and use IANA assigned ports in the future? _of_TCP_and_UDP_port_numbers


Unfortunately port 7000 was used to hack my iMac Apple Silicon 2 days ago, to control over my app, updated Xcode from unknown source and also changed Viber messenger. The hack thing was almost invisible, performed via previously hacked wifi router. So I decided to restore my system. I performed power button holding to enter my system options. I erased whole ssd and tried to load fresh new system. Well it does not go well, as the update server was unreachable - strange seemed to me. Than I realized that hackers have done something to my system options to force me not to revive or restore whole MacOS. I had to perform terminal destroy disk keys operation, ( terminal> xartutil --erase-all ) than I have found my iMac like diskless/bricked. I used Apple Configurator 2 to get my system back online and here I'm restored and healthy. Port 7000 is definitively dangerous to listen on while bad guys nearby... I almost forgot - my MacOS firewall was set to "blocking all incoming connections". So it seems there is still a way how to enter my MacOS.


This answered two of my questions on port usage, A, but and B, why my Control Center had been receiving incoming connections. However, I like Digitec have tried resetting my mac due to a previously hacked router issue, and just end up setting up another OS in a different partition somehow, and I am not new to this by any means. Files I can't access and the directory is a mess. So, Digitec, what can I do to avoid bricking and having to use the Apple Configurator 2 to revive? Any options there to make this a little easier and less time-consuming?


Back to the Port Issue, I don't understand why this Airplay Feature would use an insecure port AND have control center access on as a privacy setting by default. I've never seen this in my Preferences pane, which made me think that hackers could also access my accessibility settings which have never been set up in this version of OS on my Macbook, but I see now that there are enough options pre-set for a hacker to control my computer right there from the control center, and it's allowing incoming connections by default. Is this a design flaw we think?


On the right you'll see TCP *:5000 (LISTEN) usually listed once for each IP version, and on the left is the name of the program that's sucking on the port, which is ControlCe if its AirPlay. If nothing is using that port, then it won't be listed.


Funny thing just happened: I turned off AirPlay Receiver, started my service on port 5000, turned AirPlay Receiver back on, it is now happily listening on port 54842 in addition to port 7000 on which it was also listening before.


I've also captured traffic that is malformed coming into my brand new Mac Apple Silicon. Port 7000 was open and bound to ControlCenter. The traffic I've captured (PCAP) respembles the airplay protocol RTSP. using a blist00 tag followed by a payload.

Interestingly, the attack traffic (dport 7000) has TCP options set. They are 12 bytes. 0101 and then 10 more bytes for an array of two timestamps. I'm pretty sure this is part of the attack payload.


Plus one above. This is seriously stupid Apple on so many levels - firstly using a known developer port is dumber than a rock. Secondly constantly changing the setting locations under cryptic naming conventions is idiotic as well. Do your Product managers really have such a skewed sense of intuitive organizational structure? Here is an idea -> try alpha sorting by service and functional category (General has no meaning at all lose it). See: is an example


User PreferencesAccessibilityAppearanceControl Center (have the ability to alpha sort anything and everything and frankly create and or rename categories)FocusLogin PasswordPrivacy and SecurityScreentimeSiri & Spotlightetc.


I think you get the idea. This would be a meta organizational standard with a location design pattern, not some random organization stragegy that "seems" to make sense when in reality it does not, and also does not scale at all. the layout changes from OS iteration to OS iteration and makes solution finding nearly impossible as many search results are returned, one for each new change, that do not apply (as happened here). The fact that this is not more obvious a problem is unbelieveable and the same patteren repeats over and over with the Apple development model. C'mon folks do more research on optimal organizational construct logic, patterning, searchability, optimization, and scaling over time. And don't use known development ports for propietary service your users may or may not chose to use.


The Purchasing Division of the Office of Central Services is responsible for purchasing supplies, materials and equipment for all County Government department and agency operations. It is also responsible for procuring all contracts for construction and consultant services.


All vendors who wish to bid on future opportunities to sell products and/or services to Anne Arundel County, Maryland and its local agencies are encouraged to register online. Click on the Registration button to begin your vendor profile set up. If there are any questions regarding Vendor Registration after you have read the instructions below, please contact Webprocur...@proactis.com.


The site is secure.

The ensures that you are connecting to the official website and that any information you provide is encrypted and transmitted securely.


We developed a "Twin-Port" system that allows a 5-mm camera and a forceps to be inserted through a single port for the laparoscopic cholecystectomy procedure. An infraumbilical incision of approximately 10mm is made to insert the "Twin-Port". After pneumoperitoneum is performed, a 5-mm camera and grasper are inserted to expose the gallbladder. A 5-mm trocar is inserted approximately 1 cm below the xiphoid process, and laparoscopic cholecystectomy is performed via two ports. The gallbladder is removed through the opened "Twin-Port". The operation was performed in 40 patients without acute inflammatory gallbladder disease. None of the patients required open abdominal surgery. In 3 patients, an additional 5-mm trocar was inserted because of difficulty in removing the gallbladder from the gallbladder fossa. Mean operation time was 49min. The size of the infraumbilical wound was almost the same as that with the conventional procedure using a 10-mm trocar. The "Twin-Port" system was devised to make laparoscopic cholecystectomy possible through two ports in the clinical setting. It may be less invasive than other LC procedures, and also has cosmetic and cost advantages. This procedure appears promising as a practical surgical treatment for cholecystolithiasis and gallbladder polyps.


Totally implanted central venous port systems are widely used for chronically ill patients, who need long-term access to central veins for prolonged therapy. In 1982, Niederhuber et al. introduced the present used type of port systems into clinical use, which are usually implanted subcutaneously in the chest wall. The port system is built of a central catheter, which is inserted into a cannulated vein beneath the skin and attached to a port chamber that is placed into a subcutaneous pocket. Access of this totally implanted reservoir is possible with a special needle that allows puncture of the skin and silicone membrane of the port chamber. Chamber puncture has to take place under sterile conditions. Furthermore, patients need no external dressing of the port area and are allowed to pursue normal activities like showering and swimming after needle removal. Due to the totally subcutaneous position, the port devices are invisible and patients are not stigmatized [1,2,3].


Because of their low rates of extravasation and infection, common indications for permanent venous port systems are administration of vascular noxious medications like chemotherapy and parenteral nutrition [4]. Implantation of central venous port systems is performed in an interventional suite or operating room using fluoroscopic guidance under local anesthesia. After creating a venous access and placing a guide wire, a local anesthetic is administered into the skin and subcutaneous tissue and a pocket for the port chamber is created. Then the catheter is tunneled from the pocket to the guide wire. After dilatation of the tract, the catheter is placed into the punctured vein. The excess part of the catheter is cut and attached to the port device, which is secured with sutures. Skin and subcutaneous tissue above port chamber are also sutured. After implantation, a chest radiograph should be obtained to confirm correct positioning of the venous device or to identify possible immediate complications, respectively [5,6,7,8]. Of course, even after uneventful implantation, proper catheter maintenance is necessary to avoid complications, which are reported in up to 27% [9,10,11,12]. Overall, contraindications are rare. It has been shown that even in patients with thrombocytopenia, a port implantation is possible [13]. This pictorial review gives an illustrated overview of complications, which may be encountered during and after implantation of central venous port systems (see Table 1), since the knowledge about possible complications represents a prerequisite to avoid them.

3a8082e126
Reply all
Reply to author
Forward
0 new messages