20 ms·
About the security content of macOS High Sierra 10.13.2
- postit 9y agoI find it interesting that the most notable names from P0 team aren't native US citizens. Even with dual citizenship they won't get clearance easily to work for NSA.
- lisper 9y agoHow on earth can you tell if someone is a native citizen from their name? And what difference does it make if they're native or naturalized? One of the bedrock principles of American democracy is (or at least is supposed to be) that a citizen is a citizen. There's a reason that the phrase "second-class citizen" is supposed to have universally pejorative connotations.
- komali2 9y agoHe's not wrong about it being more difficult for people with dual citizenship to get security clearance, though. At least in that sense you can be a "second class citizen."
- walshemj 9y agoMight be hard for 1st gen citizens when I started work late 10's in the UK all 4 grandparents had to be Uk Nationals.
- lisper 9y agoI'm a naturalized U.S. citizen with a dual citizenship, and I had no trouble (well, no more than the usual trouble) getting a security clearance. But what does any of this have to do with anything anyway? The linked-to page doesn't mention the NSA, P0 team, or security clearances.
- nl 9y agobedrock principles of American democracy Clearances aren't democratic (nor should they be). No idea how they can tell citizen status from the name, though. I thought the US was made up of people form all over earth with all kinds of backgrounds so one couldn't tell from their name.
- summer_steven 9y ago>How on earth can you tell if someone is a native citizen from their name? Why are you playing dumb? He's clearly talking about someone with clearly foreign name, not someone from Canada. I'm sick of people acting willfully ignorant in their arguments
- Someone 9y agoClearly foreign, like Bezos, Obama, or Wozniak?
- summer_steven 9y agoAnd those are exceptions to the norm. Look at the census of the 100 most common American names, they're either traditional American names or Spanish names from those who immigrated here over the last 50 years. https://www.thoughtco.com/most-common-us-surnames-1422656 https://www.thoughtco.com/most-common-us-surnames-1422656
- phaemon 9y agoThose top 100 names total 50 million people, out of a total US population of 250 million (at time of 1990 census). That means that 80% of the US population has a surname other than those on that list. Assuming that 80% of the US poplulation are "foreign" because they aren't in the top 100 most common surnames, seems rather foolish.
- DRW_ 9y agoA lot of those look like traditional British names (also foreign).
- orionblastar 9y agoWe need immigration to have foreigners come here, make stsrtups, grow our economy, and create jobs. The student visa should lead to a green card. Since it does not immigrants go back to their home nation and do startups there. Not to be political, but Trump does not get that yet.
- postit 9y agoFirst:, I used notable names instead of notable persons. If that caused a confusion or misunderstanding to the point you believe I was segregating or second classing anyone, pardon me. Second: My intent was to reply to Kiddico's message which says "I find it interesting how many of those are attributed to project zero members" That's the relation of p0 with my reply Third: Ben Hawkes(NZ), Tavis Ormandy(UK), Ian Beer(UK) and Matt Tate(UK) are often credited as notable members of the project zero team.
- komali2 9y agoHuh. What kind of computers are they using over at the NSA, anyway? What about their laptops?
- asveikau 9y agoJust want to repeat what lisper said, and even more emphatically as this is personal to me, you cannot tell a native US citizen from their name. I myself have an 11 character surname from the Baltic States. I was born in Washington DC. What exactly is a native born American name to you? English origin? German? I honestly think you should be ashamed of what you wrote. It's deeply offensive to those of us with roots in other places.
- cortesoft 9y agoI have no idea if this is the case, but it could also be possible that the person you are replying to actually knows of the people listed. He might not be basing his observation on the names themselves.
- asveikau 9y agoI have encountered too many similar comments to believe that is the case.
- summer_steven 9y ago> I myself have an 11 character surname from the Baltic States. What exactly is a Baltic surname to you? Russian origin? German? I honestly think you should be ashamed of what you wrote. It's deeply offensive to those of us with roots in other places.
- asveikau 9y agoIt's neither Russian nor German. Baltic is a linguistic category on its own. Specifically Lithuanian in my case. Latvian is related. There were also Baltic language speakers in Prussia before it became majority German speaking. "Surname from the Baltic States" implies linguistic precision and specificity that "surname from the United States" does not convey and is in no means equivalent to. There is some vagueness in what I said but I left it there intentionally, people don't get crazy specific about personal details here usually. I was meaning to say I have a "foreign" surname.
- dragonwriter 9y ago> I find it interesting that the most notable names from P0 team aren't native US citizens. How do you know? > Even with dual citizenship they won't get clearance easily to work for NSA. Not being a native citizen doesn't mean you are a dual citizen; those are orthogonal concepts. Dual citizenship are frequently native-born (having citizenship-by-birth in more than one country is a common route to dual citizenship) and naturalized citizens often do not retain foreign citizenship (they formally must renounce it, but some countries don't automatically—or ever—give effect to such renunciation.)
- numerlo 9y agoPeople are reporting problems on Reddit https://www.reddit.com/r/apple/comments/7hzy3a/macos_10132_update_combo_10132_released/ https://www.reddit.com/r/apple/comments/7hzy3a/macos_10132_u... with the update. Anybody here tried it yet?
- robin_reala 9y agoYep, no problems (on a 2012 Air). Doesn’t seem to have fixed the Month 13 problem though…
- celias 9y agoIt took several minutes on a couple of Macs with fusion drives. It seemed stuck at "Calculating time remaining..." but eventually finished, rebooted, and continued installing, this time displaying a reasonable time remaining value.
- ams6110 9y agoI had this problem with the last Sierra update. Have not pulled the trigger on High Sierra yet.
- finchisko 9y agoNo problem on Air 2012. Upgrade took shorter time than my shower. :D
- kiddico 9y agoI find it interesting how many of those are attributed to project zero members
- Gys 9y agoGood to know that at least Google is very concerned with MacOS security ;-)
- ninkendo 9y agoA sizable percentage of their employees use macs, so it's not surprising.
- digi_owl 9y agoAnd the impression i have is that the pixel products are in part an attempt at getting them to dogfood Google's own stuff.
- mtgx 9y agoI think part of the reason why Google even decided to make its own phones is because of security. If you read about their BeyondCorp enterprise security architecture, it emphasizes smartphone security quite a bit and how devices without timely updates, for instance, will be banned from the network (Google's own internal network that is). Given how bad most Android OEMs are at keeping their devices up to date, Google didn't have much of a choice, other than relying on iPhones, too, for its internal security. https://cloud.google.com/beyondcorp/ https://cloud.google.com/beyondcorp/
- iagooar 9y ago> Description: A logic error existed in the validation of credentials. No shit! No one thought of that... Come on, for writing this, you better don't write anything at all...
- johansch 9y agoThis is their way of saying: upgrade from Sierra to the seemingly still supremely buggy High Sierra or you'll get owned? Gee, thanks.
- erikcs 9y agoMost of the CVEs are fixed in Sierra and El Capitan as well.
- kevinherron 9y agoYep... installed the Sierra security update this morning.
- nautilus12 9y agoLong time mac user, versed in Linux but have been using Mac for its "convenience" for years: Upgraded to high sierra, and my power modes started working totally irrationally with seemingly no explanation. When I closed the lid it suddenly started going crazy and nearly burnt a hole in my desk. I think it burnt out the logic board in this way, the GPU and kernel started panicking after 2 minutes running. When turned off it would turn itself on and go into this crazy hyper swap mode, the box when I was shipping it to applecare seemed like it would catch on fire. Had to keep using SMC shutdown to get it to turn off. I dont know if the issue was High Sierra, macbook pro 2016 (which are total crap in my opinion why in the world would you hardwire the hard drive into the logic board??), or both, but it suffices to say I'm buying a Thinkpad, and Im only using Ubuntu on it.
- jezfromfuture 9y agoYour an idiot
- chisleu 9y agoMake sure it is a new Intel CPU too so you can't get power management to work there either. #skylakeWasFun
- jrochkind1 9y ago
- nikanj 9y agoFrom a cursory glimpse, it seems Apple only pathes CVEs in OSS components when the OS itself gets an upgrade. The next time there is a problem in Apache, the chances seem pretty high it will remain unpatched on macOS for weeks, if not months.
- Prontiol 9y agoAFAIK macOS built in Apache is not started by default, so it is not a security risk anyway
- simlevesque 9y agoWhy does macOS ship with Apache ?
- rcarmo 9y agoIt used to be the basis for personal web pages, and deployable to via iWeb, the “easy” web authoring tool that baked text into images... Also, the server variants ran most services (calendars, etc.) behind it. Edit: premature posting.
- tjohns 9y agoBefore Mountain Lion, a personal web server was available under System Preferences > Sharing > Web Sharing. They removed the UI to enable it in Mountain Lion, but the functionality is still built in and can be enabled if you install Apple's MacOS Server app from the app store. Or you can just enable it from the command line.
- sccxy 9y agoHow to update when App Store is not working? > The operation couldn’t be completed. (NSURLErrorDomain error -1012.) Same error is shown on terminal too.
- deleted 9y ago[deleted]
- tachion 9y agoTry and grab yourself a combo update file and apply it to your system.
- sccxy 9y agoUnable to install from combo update file. macOS 10.13.2. Update can't be installed on this disk. In order to upgrade to newer version of macOS High Sierra on this disk, please see the instructions here [https://beta.apple.com/sp/betaprogram/apfsfusion https://beta.apple.com/sp/betaprogram/apfsfusion]. Looks like only way out is reinstall of macOS. Macbook Air 2013
- jchb 9y agoDo you have any antivirus or (shady) anti-malware software installed? Not necessarily the problem, but it wouldn't be the first time..
- sccxy 9y agoNo. Last successful update was just before this root bug.
- robertdalke 9y agoi hired a professional hacker to hack into incoming messages of my husband cell phone and send outgoing messages as if my phone were the original. firstly, he's very picky with his job so to tell him clarke referred you. he hacked into my husband cell phone within specific hours and did the job perfectly. He offers legit services such as phone cloning, clear criminal record, whatsapp account, facebook account, fixes credit score. His charges are affordable and reliable, if you are in need of services relating to hacking, contact him via address below... Email: cyberwizardhack at gmail dot com Whatsapp no:+1 317 794 1276
- joemaller1 9y agoDirect download link from Apple Support: https://support.apple.com/kb/DL1946 https://support.apple.com/kb/DL1946
- jason_slack 9y agoI was hoping this would fix my "Month 13 is out of bounds" error. It doesn't I still have apps I cannot run now because of this. Looks like it is time to back everything up and wipe my disk back to 10.13 with no other updates.
- p49k 9y agoWow, thanks for mentioning this. My Mac has been freezing when opening tons of apps lately, making it basically useless, and I couldn’t figure out what was wrong until I checked this. I never would have guessed it was a core OS issue. What a ridiculous bug to not patch immediately. Apparently you can at least mitigate it partly by disabling ReportCrash.
- jason_slack 9y agoCan you share how to do this? Anything I can try to be able to launch some of my critical apps might help. Edit: for those who are curious: https://www.gregoryvarghese.com/reportcrash-high-cpu-disable-reportcrash/ https://www.gregoryvarghese.com/reportcrash-high-cpu-disable...
- NightMKoder 9y agoHere’s an ok description if folks (like me) are curious: https://robservatory.com/month-13-is-out-of-bounds/ https://robservatory.com/month-13-is-out-of-bounds/ .
- jason_slack 9y agoNothing seems to help me in this article. Thanks for posting it. The more we know the better.
- minusf 9y agono, not fixed and joined by MirrorDisplays: com.apple.xpc.launchd[1] (com.apple.preference.displays.MirrorDisplays): Service only ran for 0 seconds. Pushing respawn out by 10 seconds.
- pjmlp 9y agoMaybe Apple should hire a few more of those mythical C developers that never make mistakes. 3 x out of bounds errors 6 x memory corruption issues
- reacharavindh 9y agoJust let my Mac take in this update, now sitting in front of it watching it say “About 3 minutes remaining” And then jump to “About 29 minutes remaining” :-( The price I pay for being dumb to let it update during the work day. OSX is starting to feel more like the old Windows....
- misterdata 9y agoAnd what time did it actually take in the end?
- reacharavindh 9y agoI'd say between 15 to 20 minutes.
- ungzd 9y agoFor me, about a hour and 2 (or 3?) reboots. And this is minor version update that consists only in bugfixes. I don't understand why overwritting few megabytes of files takes so long time and requires multiple reboots.
- dav43 9y agoIsn’t it ever! The install update now or remind later notifications is classic Windows UI.
- orionblastar 9y agoI respect people who choose Macs and MacOS but there are reasons why I use Linux Mint and other versions of GNU/Linux.
- mbesto 9y agoLemme guess - your fan is buzzing too?
- MiddleEndian 9y agoOS X through around 10.4 would run most updates in the background and you could restart later at your own leisure. It was fantastic back then.
- deleted 9y ago[deleted]