Re: Where is the Hidden Data???

In article 
<1d12c50a-a6f4-4bc9-b445-af813c20a527@[EMAIL PROTECTED]
>,
 gmark <gmark@[EMAIL PROTECTED]
> wrote:

> When a system is restored from Time Machine, isn't it supposed to be a
> complete copy of the system from that time?  

I haven't heard or read any claims that Time Machine creates a complete 
duplicate of the startup drive. I would imagine only certain files are 
backed up, and subsequently restored.

> So why do I get messages
> about applications being "used the first time" or "downloaded from the
> internet"?  Where is the data that told the system I've used these
> before?  Gone?  How?

Those applications are quarantined. Apple marks applications for 
quarantine by adding an extended attribute to the application file. You 
can remove the attribute manually if you want. Here's how:

Removing Applications from Apple Quarantine

1. Open a terminal window.
2. Switch to an administrator account (su admin).
3. Change directory to /Applications (cd /Applications).
4. Check which files have extended attributes (ls -lsa). 
     Entries marked with "@[EMAIL PROTECTED]
" have extended attributes. 
     Entries marked with "+" have ACLs.
5. List the attributes (xattr -l filename).
6. Remove the "com.apple.quatantine" attribute if it is defined (xattr 
-d com.apple.quarantine filename).
7. Recheck the attributes.
8. Rinse and repeat for all "downloaded applications" giving errors.
9. Exit.

-- 
Please send all responses to the relevant news group. E-mail sent to
this address may be devoured by my very hungry SPAM filter. I do not
read posts from Google Groups. Use a real news reader if you want me to
see your posts.

JR