News for hackers. Stuff that matters.
Re:Apple's operating systems mistreat or harm the user by kirb on Wednesday August 21, 2019 @05:40AM (#20755757)
Worth noting the hfsplus driver in Linux can only mount as read-only, unless you manually mount it with the flag to force it to ignore the journal... which is a silly idea when journaling is what makes modern filesystems so resilient. apfs-fuse is actually in a more promising position than hfsplus, as it supports mounting any volume in the APFS partition, FileVault encrypted volumes, and Fusion Drive volumes. Granted no distro is shipping apfs-fuse that I know of. They probably could at this point as it is read-only.

https://github.com/sgan81/apfs-fuse

Re:Apple's operating systems mistreat or harm the user by Fnoord on Wednesday August 21, 2019 @08:25AM (#20756631)
Paragon also sell a proprietary HFS+ driver for Linux which AFAIK r/w. For forensics, r/o is enough though.