Hacker News

points by giancarlostoro 1 day ago | 0 comments

People would have to use it in some drastic catastrophic way for them to force it out in an update, which they might push it out in the next macOS update, which don't come nearly as frequently as Windows bloatware updates do.

[–] pc86 1 day ago

This seems important enough to just send out a patch update that removes the cert and does nothing else. But apparently at least a couple people at Apple disagree; or, something I'm not familiar with makes that type of update impossible.

[–] xp84 1 day ago

You have to admit that “just a quick patch” isn’t automatically low-risk. You could cause a large blast radius if you rush any patch out without proper testing.

[–] pc86 1 day ago

I agree 100%, but I keep going back to the blast radius of a compromised CA and my gut instinct is still "get rid of it and push a hotfix" but I completely acknowledge it's a lot more complicated to ship a MacOS update than just branch off of master and push a new commit, and my experience is almost entirely the latter.

[–] giancarlostoro 1 day ago

I mean, I agree with you, I'm just basing my thoughts of what I've seen managers at different companies prioritize as "important" even when engineers cry that a security issue should be of higher priority...

[–] dudeinhawaii 1 day ago

I would put Apple updates in that bloatware category given I was forced to upgrade my phone after iOS and updates eventually took up 50% of storage.

[–] behringer 1 day ago

amusing you criticize windows updates here where the macos update schedule is woefully inadequate.

[–] drfloyd51 1 day ago

One is too delayed. The other is frequent but full of crap.

[–] giancarlostoro 1 day ago

The issue with Windows is they eventually force it on you, no matter what.

[–] alt227 1 day ago

What, MacOS doesnt?