News for hackers. Stuff that matters.

A comment on About the security content of Security Update 2017-001. Parent comment

Re:About the security content of Security Update 2017-001 by inetknght on Wednesday November 29, 2017 @11:32AM (#15808076)
If they did for this, great. But the fact that they could for any other update, too, is what's scary.
[ Parent | on HN ]
Re:About the security content of Security Update 2017-001 by 0x0 on Wednesday November 29, 2017 @11:37AM (#15808139)
They do this all the time with invisible updates.

Click AppleMenu > About this mac > System Report, and scroll down to Software > Installations, and click on the "Install Date" column header twice to sort by install date descending, and you will discover apple pushing updates very frequently for things like "MRTConfigData", "XProtectPlistConfigData", "Voice Update - Samantha", "Gatekeeper Configuration Data", "Chinese word list update" etc etc.

It's not without flaws; at least once they slipped up and pushed a blacklist for their own ethernet adapter driver (cutting off their own patch life-line, I guess, for those affected) : https://www.digitaltrends.com/computing/mac-update-breaks-et...

[ Parent | on HN ]
Re:About the security content of Security Update 2017-001 by mikeash on Wednesday November 29, 2017 @12:18PM (#15808648)
It's an option that this person enabled. Nothing scary.
[ Parent | on HN ]