Hacker News

points by ChrisClark 1 day ago | 0 comments

Are they just saying "do it yourself"? Can't they just send out an update?

They did send out an update this week…that undid this mitigation for users that already removed the certs.

I imagine their response would be: "we need to parse a new file format, that may have been edited by users, reliably. That takes time."

[–] xp84 1 day ago

Why would they need to? Can’t they ship an update that runs an executable that uses the already-existing tooling to update the pem? They’ve posted the cli instructions, so, ship that as a shell script and run it. It should be idempotent, whether the user has already “untrusted” it or not.

[–] seam_carver 1 day ago

Isn't the file overwritten every update?

[–] nailer 1 day ago

I hope not, that would be data loss.

[–] roryirvine 22 hours ago

The most recent MacOS update does indeed revert any manual changes you've made, and re-adds the offending cert: https://mstdn.social/@jschauma/117513596272504904

Their attitude seems to be that you don't own anything outside of your homedir, and touching system-managed files is done at your own risk.