lobsters score: 1 · tags: cryptography, mac
Apple has always been quietly hostile to the use of Terminal and command line tools: “You’re not using XCode or our approved APIs so it’s your problem, update it yourself”
score 1 · canonical
Discussion on Apple’s official statement regarding this: https://lobste.rs/s/xzp4m0/about_compromised_emudhra_intermediate
score 1 · canonical
deleted by creator
Things often take longer at bigger companies. (I’ve worked at Apple, Google, Sun…)
I suspect that for some reason the process to create/test/release a security update touching files in /etc is separate from, and slower than, the process to update the OS trust settings.
Especially since this only affects a small fraction of their user base — for all I know that file may not even exist until the dev tools package is installed.
score 3 · canonical
It may affect a small fraction of their user base directly, but developers and other git users are high-value targets because a compromise there can often lead to supply chain compromise that will affect a much larger group of people.
score 2 · canonical
This is true. I think the primary slowdown is just bureaucracy, aka procedures you have to follow before rolling out any software update to billions of users.
score 2 · canonical