4 ms·

It was completely irresponsible not to release the OS X fix at the same time as the ios fix. Apple also needs to setup a way to alert users when an update fixes

by gommm 13y ago

It was completely irresponsible not to release the OS X fix at the same time as the ios fix. Apple also needs to setup a way to alert users when an update fixes an important security fix. None of my ios devices asked to install the fix and I had to do a manual update check. This should not happen for major security issues.

0x0 13y ago
Also, the ios over-the-air update refused to download over 3g even though it was only 10mb. I couldn't even manually update until I got back home much later :-/ (Last time I tethered to a friend's android phone!)
- Geee 13y ago
  This is the stupidest limitation of iOS. Why I can't update or download big apps on 3G? I just don't get it.
  - drawkbox 13y ago
    Blame limitations to wireless air delivery on telcos. They have it at 100MB now limit but before it was 50MB and before that it was 20MB. They telcos prevented files/apps over that size from being transmitted over their wireless networks.
    - 0x0 13y ago
      Yep, but Apple really should have increased the limit for updates to match the limit for app sizes. It's pretty ridiculous that you can download as many 99mb app installs and updates as you want, but be denied a 10mb critical security patch over 3g.
  - Varcht 13y ago
    Walled gardens are great... until you run into the wall.
  - gorm 13y ago
    It's just silly stupid. But you can get social with a friend, then turn on your personal hotspots and connect your iPhones to install security update. Sort of like a LAN party.
    - deleted 13y ago
      [deleted]
- dsirijus 13y ago
  I hook iPhone via cable and turn on Personal Hotspot, and then on OS X I do Internet Sharing via WiFi back to iPhone. It shouldn't be like this; my main source of bandwidth _is_ 3G.
  - venus 13y ago
    I am kind of amazed that that works. What's going on - does the baseband have its own IP stack, which it somehow shares to the computer, which then declares its own mini-lan and lets the iPhone on at a higher level such that iOS uses that preferentially? That's bizarre; I'm tempted to try it out when I get back to a country in which I have mobile data. "More happening in this iPhone, I feel, than has been revealed"
    - miahi 13y ago
      You can do that with a routing/forwarding table in any OS [that provides access to routing/chains]. Forward+NAT the cable tether to the 3G network, but keep the default gateway to WiFi, so the local applications will not use the 3G.
    - beachstartup 13y ago
      you don't need separate stacks to do this. each machine is the other's gateway, on separate ip addresses.
  - dhughes 13y ago
    > Personal Hotspot I always giggle at it being called that.
ralfd 13y ago
My iPhone had a popup with yes/cancel for the update and then showed a badge on the icon when I declined at first.
- mikeash 13y ago
  They periodically check for new updates. You probably just happened to have a periodic check occur shortly after the update came out, just by pure chance. Everybody should see that prompt eventually, but it may take a day or two.
  - frankzinger 13y ago
    A day or two for an important security update is too long. I heard about this thing yesterday on HN and did the update manually. My dad and sister's iOS devices hadn't notified them yet when I told them about it today, more than 24 hours later.
    - mikeash 13y ago
      I completely agree. I'm just explaining why it might show up more quickly on some devices, purely due to chance.
      - frankzinger 13y ago
        Yeah, I should have replied to your parent.
_bing 13y ago
Speculation, but it makes me wonder if there’s a part of the story we’re not hearing yet. Because yes, why not even hold the iOS fix for a day or two until they can both be pushed together? Obviously that’s not good, but isn’t it better than basically making an implicit irresponsible disclosure against your own operating system? Maybe this bug is being exploited in the wild already and that’s the reason for the urgency? Again, not that this should not be urgent, but why help your iOS users and at the same time potentially harm your OS X users? It just seems like a really weird decision.
- 0x0 13y ago
  Even the Apple TV was patched before OSX...

by gommm 13y ago

0x0 13y ago

Also, the ios over-the-air update refused to download over 3g even though it was only 10mb. I couldn't even manually update until I got back home much later :-/ (Last time I tethered to a friend's android phone!)

Geee 13y ago
This is the stupidest limitation of iOS. Why I can't update or download big apps on 3G? I just don't get it.
- drawkbox 13y ago
  Blame limitations to wireless air delivery on telcos. They have it at 100MB now limit but before it was 50MB and before that it was 20MB. They telcos prevented files/apps over that size from being transmitted over their wireless networks.
  - 0x0 13y ago
    Yep, but Apple really should have increased the limit for updates to match the limit for app sizes. It's pretty ridiculous that you can download as many 99mb app installs and updates as you want, but be denied a 10mb critical security patch over 3g.
- Varcht 13y ago
  Walled gardens are great... until you run into the wall.
- gorm 13y ago
  It's just silly stupid. But you can get social with a friend, then turn on your personal hotspots and connect your iPhones to install security update. Sort of like a LAN party.
  - deleted 13y ago
    [deleted]
dsirijus 13y ago
I hook iPhone via cable and turn on Personal Hotspot, and then on OS X I do Internet Sharing via WiFi back to iPhone. It shouldn't be like this; my main source of bandwidth _is_ 3G.
- venus 13y ago
  I am kind of amazed that that works. What's going on - does the baseband have its own IP stack, which it somehow shares to the computer, which then declares its own mini-lan and lets the iPhone on at a higher level such that iOS uses that preferentially? That's bizarre; I'm tempted to try it out when I get back to a country in which I have mobile data. "More happening in this iPhone, I feel, than has been revealed"
  - miahi 13y ago
    You can do that with a routing/forwarding table in any OS [that provides access to routing/chains]. Forward+NAT the cable tether to the 3G network, but keep the default gateway to WiFi, so the local applications will not use the 3G.
  - beachstartup 13y ago
    you don't need separate stacks to do this. each machine is the other's gateway, on separate ip addresses.
- dhughes 13y ago
  > Personal Hotspot I always giggle at it being called that.

ralfd 13y ago

My iPhone had a popup with yes/cancel for the update and then showed a badge on the icon when I declined at first.

mikeash 13y ago
They periodically check for new updates. You probably just happened to have a periodic check occur shortly after the update came out, just by pure chance. Everybody should see that prompt eventually, but it may take a day or two.
- frankzinger 13y ago
  A day or two for an important security update is too long. I heard about this thing yesterday on HN and did the update manually. My dad and sister's iOS devices hadn't notified them yet when I told them about it today, more than 24 hours later.
  - mikeash 13y ago
    I completely agree. I'm just explaining why it might show up more quickly on some devices, purely due to chance.
    - frankzinger 13y ago
      Yeah, I should have replied to your parent.

_bing 13y ago

Speculation, but it makes me wonder if there’s a part of the story we’re not hearing yet. Because yes, why not even hold the iOS fix for a day or two until they can both be pushed together? Obviously that’s not good, but isn’t it better than basically making an implicit irresponsible disclosure against your own operating system? Maybe this bug is being exploited in the wild already and that’s the reason for the urgency? Again, not that this should not be urgent, but why help your iOS users and at the same time potentially harm your OS X users? It just seems like a really weird decision.

0x0 13y ago
Even the Apple TV was patched before OSX...