Hacker News

points by nailer 1 day ago | 0 comments

I imagine their response would be: "we need to parse a new file format, that may have been edited by users, reliably. That takes time."

[–] xp84 1 day ago

Why would they need to? Can’t they ship an update that runs an executable that uses the already-existing tooling to update the pem? They’ve posted the cli instructions, so, ship that as a shell script and run it. It should be idempotent, whether the user has already “untrusted” it or not.

[–] seam_carver 1 day ago

Isn't the file overwritten every update?

[–] nailer 23 hours ago

I hope not, that would be data loss.

[–] roryirvine 21 hours ago

The most recent MacOS update does indeed revert any manual changes you've made, and re-adds the offending cert: https://mstdn.social/@jschauma/117513596272504904

Their attitude seems to be that you don't own anything outside of your homedir, and touching system-managed files is done at your own risk.