News for hackers. Stuff that matters.

A comment on About the security content of Security Update 2017-001. Parent comment

Re:About the security content of Security Update 2017-001 by GeekyBear on Wednesday November 29, 2017 @04:09PM (#15810874)
Apple still allows users to control their system's update behavior.

"Install system data files and security updates" is turned on by default in the App Store Control panel, but the user can turn it off if they (unwisely) wish to.

In Windows XP, for example, Windows Update had a similar option, but that was removed in Windows 10.

[ Parent | on HN ]
Re:About the security content of Security Update 2017-001 by eridius on Wednesday November 29, 2017 @04:56PM (#15811248)
AIUI the expectation is that Apple is going to force all 10.13.1 machines to automatically upgrade themselves regardless of settings. This is something they've apparently done once before, with an ntpd remote vulnerability. Given the nature of this bug, forcing all machines to automatically apply this patch seems like the right move.

(BTW the patch doesn't require restarting the machine, so it's not going to interrupt anyone's workflow)

[ Parent | on HN ]
Re:About the security content of Security Update 2017-001 by GeekyBear on Wednesday November 29, 2017 @05:34PM (#15811537)
Not regardless of settings, but critical security updates will be installed without user intervention with the default settings in the App Store Control Panel.

Here's an article discussing their first use of this mechanism.

https://www.computerworld.com/article/2862976/apple-deploys-...

[ Parent | on HN ]
Re:About the security content of Security Update 2017-001 by xenadu02 on Wednesday November 29, 2017 @06:32PM (#15811907)
No, the poster you replied to is correct. If you turn that setting off you will not automatically get this update.
[ Parent | on HN ]