About the security content of Security Update 2017-001
support.apple.com
About the security content of Security Update 2017-001
1–10 of 158 posts
Re: About the security content of Security Update 2017-001
#2Kinda aggressive. I don't even clicked on update and they already did that for me.
Re: About the security content of Security Update 2017-001
#3Kinda aggressive. I don't even clicked on update and they already did that for me.
They force-pushed code to your box without you agreeing to this? Can anyone else confirm?
Re: About the security content of Security Update 2017-001
#4Kinda aggressive. I don't even clicked on update and they already did that for me.
They force-pushed code to your box without you agreeing to this? Can anyone else confirm?
It's a massive global security vulnerability with huge amounts of public exposure (so any malicious user is well aware they can take advantage). If they did, wouldn't be surprised and I'd be glad they did.
Re: About the security content of Security Update 2017-001
#5Kinda aggressive. I don't even clicked on update and they already did that for me.
They force-pushed code to your box without you agreeing to this? Can anyone else confirm?
I opened App Store, found the package waiting and hit install, waited for a few minutes until it finished. So not automatically for me.
Re: About the security content of Security Update 2017-001
#6Earlier quoted context omitted.
They force-pushed code to your box without you agreeing to this? Can anyone else confirm?
It's a massive global security vulnerability with huge amounts of public exposure (so any malicious user is well aware they can take advantage). If they did, wouldn't be surprised and I'd be glad they did.
If they did for this, great. But the fact that they could for any other update, too, is what's scary.
Re: About the security content of Security Update 2017-001
#7Kinda aggressive. I don't even clicked on update and they already did that for me.
They force-pushed code to your box without you agreeing to this? Can anyone else confirm?
The update didn't auto-install for me. I suppose it only does that when "Install system data files and security updates" is enabled in System Preferences -> App Store.
Re: About the security content of Security Update 2017-001
#8Kinda aggressive. I don't even clicked on update and they already did that for me.
Is it possible that "Automatically check for updates" and "Install system data files and security updates" are set in your system preferences?
I have that enabled because this is exactly the kind of thing I want patched ASAP.
Re: About the security content of Security Update 2017-001
#9Kinda aggressive. I don't even clicked on update and they already did that for me.
They force-pushed code to your box without you agreeing to this? Can anyone else confirm?
There are options in macOS to automatically install various types of updates, labeled as 'app updates', 'macOS updates', 'system data files and security updates'. Maybe m6g6a has the last one checked.
I opened App Store and just had it waiting for me. Where the name would normally be in the Updates tab, it just reads "Install this update as soon as possible." [0]
Edit: According to Apple's statement, they will automatically start installing the update on systems running 10.3.1 later today.