8 ms·

Received one of these too. I do not update to the latest-and-greatest when it first comes out. I typically wait a bit for everyone else to 'beta test' it for

Received one of these too. I do not update to the latest-and-greatest when it first comes out. I typically wait a bit for everyone else to 'beta test' it for me. If my bank is saying 'no, seriously, go fix this' maybe I should change my stance.

jjulius 4y ago
>Received one of these too. Was there any additional context or comments provided in the email? Both the initial post and this comment are pretty vague on what was communicated beyond the phrase, "Update your iPhone".
- dsizzle 4y ago
  No additional context. They don't even specify which you used (I have both a Mac and an iPhone and both are up to date). The full text is below: "Update your iOS software and Safari® browser to keep your device(s) secure We noticed the iOS software version you’re using on your mobile device and/or the Safari browser on your computer may need to be updated. <Instructions on how to update>"
  - themadturk 4y ago
    Amusing, as I also received the email and am using MacOS and iOS betas right now. I've updated into the future, for heaven's sake!
  - jjulius 4y ago
    Thanks, appreciate the response! :)
justinzollars 4y ago
I imagine they believe there is the potential to lose significant money
- treesknees 4y ago
  I wonder if the "actively being exploited" bit of the webkit vulnerability was targeting either Bank of America or other banking apps.
detaro 4y ago
Apple saying "looking at web content can lead to arbitrary code execution, this is potentially already used in the wild" wasn't enough?
- lesuorac 4y ago
  Isn't that the whole point of the Web nowendays? Anybody can put code out there that you'll run on your device?
  - spcebar 4y ago
    Yes, but ideally in a sandboxed environment that prevents drive-by attacks. The web looks very different when you need to treat websites with the same caution as an exe.
    - OrangeMonkey 4y ago
      Or with the same caution as an ex.
      - MarcoZavala 4y ago
  - BHSPitMonkey 4y ago
    You forgot the "arbitrary" qualifier.
- tomjen3 4y ago
  They didn't say that in the update notes I could see. It was the same vague stuff about system security that they normally say.
- drewg123 4y ago
  It sure would be nice if Apple stopped forcing web browsers to be reskins of Safari, and allowed full implementations of 3rd party web browsers like Firefox and Chrome. Then we wouldn't have such a monoculture on iOS
magwa101 4y ago
There are a ton of beta tests ahead of release, I think it's always prudent to keep up to date very quickly. This seems to be the top security expert recommendation.
yieldcrv 4y ago
I’m pretty content with the iphone 12 pro but I wonder if I’m becoming like you or others, where there was some other arbitrary technological progress and lack of interest in trends and suddenly 10 years went by and people are like “what is that device why are you using that”
- davidlumley 4y ago
  In this case I think they mean "update your version of iOS" because there was a recent and important security fix: https://support.apple.com/en-us/HT213412 https://support.apple.com/en-us/HT213412
- sixstringtheory 4y ago
  They’re talking about updating the operating system on the phone, not buying a new phone. The title got me like that as well. There was a security update that went out recently: https://support.apple.com/en-us/HT213412 https://support.apple.com/en-us/HT213412
notananthem 4y ago
Updates that Apple, or anyone (Microsoft etc) pushes to customers has been internally tested for a while on different rings of risk. People who write the code run it relentlessly to start to catch all the issues and then start pushing out updates to varying pools of people who can take those small bits of risk of a bug here or there, and poke holes in it. Once it reaches the company's QC metrics it is pushed outside. Pushing out bad updates ruins your credibility, companies are incentivized not to do so. Updating your computing devices as soon as public updates are made is vital to your own security/safety.
- mrazomor 4y ago
  Yes, but there are layers of badness. An update might break the feature I need, or change something my workflow depends on (more common). I'd rather wait for blog posts with workarounds/fixes. As it tends to be extremely time consuming to fix it myself (as it's often outside my domain).
- jeffffff 4y ago
  most people who are hesitant to update are hesitant because they've been burned in the past. apple has a history of making phones unusably slow with updates and breaking 3rd party software.

jjulius 4y ago

>Received one of these too. Was there any additional context or comments provided in the email? Both the initial post and this comment are pretty vague on what was communicated beyond the phrase, "Update your iPhone".

dsizzle 4y ago
No additional context. They don't even specify which you used (I have both a Mac and an iPhone and both are up to date). The full text is below: "Update your iOS software and Safari® browser to keep your device(s) secure We noticed the iOS software version you’re using on your mobile device and/or the Safari browser on your computer may need to be updated. <Instructions on how to update>"
- themadturk 4y ago
  Amusing, as I also received the email and am using MacOS and iOS betas right now. I've updated into the future, for heaven's sake!
- jjulius 4y ago
  Thanks, appreciate the response! :)

justinzollars 4y ago

I imagine they believe there is the potential to lose significant money

treesknees 4y ago
I wonder if the "actively being exploited" bit of the webkit vulnerability was targeting either Bank of America or other banking apps.

detaro 4y ago

Apple saying "looking at web content can lead to arbitrary code execution, this is potentially already used in the wild" wasn't enough?

lesuorac 4y ago
Isn't that the whole point of the Web nowendays? Anybody can put code out there that you'll run on your device?
- spcebar 4y ago
  Yes, but ideally in a sandboxed environment that prevents drive-by attacks. The web looks very different when you need to treat websites with the same caution as an exe.
  - OrangeMonkey 4y ago
    Or with the same caution as an ex.
    - MarcoZavala 4y ago
- BHSPitMonkey 4y ago
  You forgot the "arbitrary" qualifier.
tomjen3 4y ago
They didn't say that in the update notes I could see. It was the same vague stuff about system security that they normally say.
drewg123 4y ago
It sure would be nice if Apple stopped forcing web browsers to be reskins of Safari, and allowed full implementations of 3rd party web browsers like Firefox and Chrome. Then we wouldn't have such a monoculture on iOS

magwa101 4y ago

There are a ton of beta tests ahead of release, I think it's always prudent to keep up to date very quickly. This seems to be the top security expert recommendation.

yieldcrv 4y ago

I’m pretty content with the iphone 12 pro but I wonder if I’m becoming like you or others, where there was some other arbitrary technological progress and lack of interest in trends and suddenly 10 years went by and people are like “what is that device why are you using that”

davidlumley 4y ago
In this case I think they mean "update your version of iOS" because there was a recent and important security fix: https://support.apple.com/en-us/HT213412 https://support.apple.com/en-us/HT213412
sixstringtheory 4y ago
They’re talking about updating the operating system on the phone, not buying a new phone. The title got me like that as well. There was a security update that went out recently: https://support.apple.com/en-us/HT213412 https://support.apple.com/en-us/HT213412

notananthem 4y ago

Updates that Apple, or anyone (Microsoft etc) pushes to customers has been internally tested for a while on different rings of risk. People who write the code run it relentlessly to start to catch all the issues and then start pushing out updates to varying pools of people who can take those small bits of risk of a bug here or there, and poke holes in it. Once it reaches the company's QC metrics it is pushed outside. Pushing out bad updates ruins your credibility, companies are incentivized not to do so. Updating your computing devices as soon as public updates are made is vital to your own security/safety.

mrazomor 4y ago
Yes, but there are layers of badness. An update might break the feature I need, or change something my workflow depends on (more common). I'd rather wait for blog posts with workarounds/fixes. As it tends to be extremely time consuming to fix it myself (as it's often outside my domain).
jeffffff 4y ago
most people who are hesitant to update are hesitant because they've been burned in the past. apple has a history of making phones unusably slow with updates and breaking 3rd party software.