8 ms·
Apple has just released the first Rapid Security Response for Ventura
- doublepg23 3y agoI’m seeing a lot of “Unable to Verify” based on the r/Apple Reddit thread. EDIT: Seems to be working as of 15min ago. https://reddit.com/r/apple/comments/134u12e/apple_releases_rapid_security_response_update_for/ https://reddit.com/r/apple/comments/134u12e/apple_releases_r...
- deleted 3y ago[deleted]
- sashk 3y agothat's for iOS/iPadOS. Installed macOS update without issues.
- deleted 3y ago[deleted]
- ls612 3y agoUpdates are also available for iOS it seems.
- tuxone 3y agoDoesn’t seem to be installable for me on Xr.
- itake 3y agoMy iPhone can't verify the update.
- yumraj 3y agoDitto. Keeps complaining that my phone does not have Internet access.
- AdamJacobMuller 3y agoPlease click _here_ to go to our website and troubleshoot why you don't have internet access.
- Scoundreller 3y agoSame. Says it can’t because I’m no longer connected to the internet, but I’m here!
- nehal3m 3y agoSame. iPhone 8, EU West. edit: MacOS reports iPhone being up to date. edit 2: Selecting 'use mobile data' when downloading and installing does work. Go to Settings > General > iPhone Storage and delete the update package. Restart the download & install process and let it use mobile data this time. I get the feeling checking the hash does work over LTE as opposed to Wi-Fi, based on absolutely wild speculation.
- Scoundreller 3y ago> let it use mobile data this time. This is the most Canadian-hostile update in the history of computing!
- bink 3y agoThe dangers of over-simplifying your error messages to cater to the average user.
- willis936 3y agoI think the real hazard is insufficient testing of infrequently used features.
- livinglist 3y agoHappened to me quite few times, try rebooting
- win32k 3y agoIf anyone thinks any non-Apple platform is more secure than modern iPhone/Macbooks running iOS/macOS, you are dead wrong. Apple's security is far ahead of other platforms.
- slillibri 3y agoLike many others, I am unable to verify this right now.
- colechristensen 3y agoOpenBSD is pretty damn secure. I think I've even seen an insane person with a marginally operational openbsd phone.
- smabie 3y agoHow would anyone even know? OpenBSD pretty obscure and unused. Payoff of attacking OpenBSD much lower.
- colechristensen 3y agoOpenBSD is used, but often in less visible ways, as are many of it's subprojects. OpenSSH, for example, is an OpenBSD project and damn near everybody uses it.
- win32k 3y agoSecurity is a lot more than just the OS. Modern iPhones have security chips that ensure the integrity of the main OS during boot and while running. A large part of Apple's security excellence comes from their hardware security integrated with their software/firmware.
- bink 3y agoAnd they make the entire mobile industry more secure by showing what can be done, allowing others to follow suit.
- 3y ago
- 0000011111 3y ago"Unable to check for updates Could't communicate with a helper application." That is the error I am getting when trying to update from on macOS 13.3.1 on a M1 2020 MacBook Air.
- fweimer 3y agoFor those not familiar with the Apple platforms: > By default, your device allows Rapid Security Responses to be applied automatically and, if necessary, will prompt you to restart your device. https://support.apple.com/en-us/HT201224 https://support.apple.com/en-us/HT201224 Unfortunately, the article does not say whether the update is applied automatically even if the device is locked.
- jeffbee 3y agoGood: much less disruptive than a regular macos update. Bad: still requires a reboot, and is still irrelevant noise for non-users of safari.
- gnicholas 3y ago> is still irrelevant noise for non-users of safari. Can you explain this more? Despite being a longtime Apple user, I've never heard of RSR before. If it's just an update for Safari, why does it require the computer to be rebooted? Does it not affect me if I use other browsers for 99% of my web usage?
- bink 3y agoThe Safari libraries are used by tons of apps running on OSX. It's probably just easier to reboot than to ensure that all affected apps are reloaded.
- capableweb 3y agoAre there apps using the Safari libraries running in the background? Sounds like something only user-facing applications would be using. Also, isn't one of the arguments for Apple's stronghold on all the software running on their machines that they know 100% what everything is doing? Should be trivial to look up which processes are using specific parts and restart those.
- ikekkdcjkfke 3y agoI feel like Android is much more modular in that regard, even the apps for the playstore is an app that can be killed/wiped essily from an all apps menu
- olliej 3y ago> Also, isn't one of the arguments for Apple's stronghold on all the software running on their machines that they know 100% what everything is doing? What stronghold? You can run whatever apps you want on a Mac. As for identifying libraries in use. you can do that on any platform: Pause all processes, scan the address space of all processes to find anything the looks like a pointer to an impacted library, then hope/assume that there's no pointer tagging or munging going on, and voila that's your list. Hopefully you didn't miss anything. The problem is that that's just a heuristic and you'd want to be _really_ sure you were right, or weird crashes will happen. On macOS specifically there are other hurdles, the biggest being that the system partition is readonly, and so system libraries can't be replaced outside of early on in the boot process.
- niij 3y agoWarning: if you install this it doesn't give you the option to delay a reboot to apply the update. I got a notification my computer would be restarting in 60 seconds as soon as the install completed.
- capableweb 3y agoAh, the good'ol Windows method of forcing updates. Rely on users saying no within X seconds, otherwise go for it regardless if they want to or not. Awesome when you didn't notice that an update happened because you were grabbing a coffee, or that the computer want to check a 2TB disk for errors upon reboot. Usually happens when you have much more important things to do at the moment.
- alpaca128 3y agoForced reboot after an update is not the same as forced updates. It's not like Windows can update without reboot either. So far I haven't seen Mac OS force any update on me, not only that but when I accidentally activated automatic updates it showed a notification that stays on screen until you confirm/cancel the setting change.
- Dalewyn 3y ago>It's not like Windows can update without reboot either. And neither can Linux, contrary to popular belief. Anything that involves system services or god forbid the kernel requires a reboot. Yes, if the kernel wasn't updated you could meticulously reboot each individual system service that was updated instead, but why bother when you can just reboot and be done with it?
- zamalek 3y ago> Anything that involves system services This is not true. NixOS, as one example, is able to figure out which services (including system) need to be restarted. > god forbid the kernel This is not true either. Live kernel updates are possible (but are usually a paid addition, e.g. https://ubuntu.com/security/livepatch https://ubuntu.com/security/livepatch).
- egksgjegk 3y ago[flagged]
- mrtksn 3y agoInteresting, apparently this can be removed post install: https://i.imgur.com/gvbbU8F.jpg https://i.imgur.com/gvbbU8F.jpg why would that be?
- judge2020 3y agoTo allow people to jailbreak? /s Probably to ensure someone can go back if this fix breaks functionality (which it shouldn't do).
- LeoPanthera 3y agoMaybe rapid security updates don’t get much testing, so they allow you to remove it in case it causes problems? Just a guess.
- chuckreynolds 3y agoI was great to see until the update didn't work lol. works now but... confusing for the first use.
- diebeforei485 3y agoHopefully the learnings from this rollout will make future updates smoother.
- acdha 3y agoThe thing I don’t understand is why they blocked RSR behind a password prompt. You can’t even use Face ID / Touch ID and in my experience that plus a reboot means a lot of people will put it off as long as they can. iOS also really needs to trigger the automatic Photos + Apps storage reclamation process since statistically everyone I know who delays updates does it because their phone is full of pictures & videos. The iCloud offload works beautifully so I don’t know why they haven’t added a trigger multiple years into that feature existing.
- easton 3y ago> The thing I don’t understand is why they blocked RSR behind a password prompt. As I recall there’s something they can’t decrypt without your password that they need to decrypt during updates. You could say “that’s their choice” but maybe they worry if their signing keys leaked that at least you’d also need to type your password in to kick off an update. > The iCloud offload works beautifully so I don’t know why they haven’t added a trigger multiple years into that feature existing. Guessing this comes down more to bandwidth as to why it’s opt in. If there’s enough speed to upload your photos but not download them when the update completes, you’re going to be upset. Or if you get on a plane and your iPad is doing an update and it completes after takeoff but all your movies/games were offloaded, you’d be upset. (That’s probably fixable by doing some math to figure out if it’s workable, or by asking the user on the update screen if they’d like to offload and reload. But it wouldn’t be 100% automated, which is what I think you were asking?)
- acdha 3y agoYeah, I’m sure there’s a good reason for it. I’m just surprised it’s lingered for years since it’s such an effective deterrent. > Or if you get on a plane and your iPad is doing an update and it completes after takeoff but all your movies/games were offloaded, you’d be upset. I could see something like that (although you could do things like install at night when you’re at home) but it’s completely opaque: you’ll just stop getting updates, nothing will ever prompt you, and it forces you to do cleanup manually. At the very least I’d expect a prompt and a “clear up space” button.
- 3y ago
- dur-randir 3y agoIf it requires reboot, I don't get why it's better than the regular update. And macOS updates now require downtime like in the worst Windows days. Something went into a wrong direction.