I agree with this assessment. The initial fix of the exploit may be easy, but I would bet that the compatibility testing and fixes associated with things that w

I agree with this assessment. The initial fix of the exploit may be easy, but I would bet that the compatibility testing and fixes associated with things that will break because of the patch is what is holding it up. It would be an interesting exercise to try to figure out what made it easier to patch in 10.10. Is it because it is an active code base, or because something was refactored between 10.8/10.9 and 10.10 that eliminated the need to take advantage of this undocumented capability--for instance, something in the System Preferences getting refactored?