Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

About the security content of macOS Tahoe 26.6

support.apple.com

Post reply on HN
Print view View original

11–20 of 157 posts

Re: About the security content of macOS Tahoe 26.6

#11

Post by grahamlee »

AJRF wrote: post #3

Weird thing to see at number 3 on HN - is there some subtle context I am missing here? Are we wink winking that it's a lot of fixes?

And it's not actually that much information "about the security content". For example: "Impact: An app may be able to access sensitive user data. Description: An access issue was addressed with additional sandbox restrictions." This references CVE-2026-43819, which doesn't have any more information. Compare this with the nearly decade-old https://support.apple.com/en-gb/103680, and you see much more specific information about problems and their remedies (except in situations where Apple's action was to update a vendor component).

Re: About the security content of macOS Tahoe 26.6

#12

Post by muterad_murilax »

tombot wrote: post #8
embedding-shape wrote: post #2

Lots of "in collaboration with Claude and Anthropic Research" mentions, no mentions of other labs. I'd assume Apple already had access to whatever the most powerful model is at the various US-based labs, but perhaps not?

Apple isn’t friends with OpenAI anymore

What happened?

Re: About the security content of macOS Tahoe 26.6

#13

Post by receiptful-io »

nkrisc wrote: post #10
proactivesvcs wrote: post #9

Earlier quoted context omitted.

One of them lists an anonymous person! CVE-2026-43744: Mathis Mansière, an anonymous researcher

It reads as if "an anonymous researcher" is describing Mathis Mansière, which is quite humorous.

Genius, that made my day!

Re: About the security content of macOS Tahoe 26.6

#14

Post by senadir »

embedding-shape wrote: post #2

Lots of "in collaboration with Claude and Anthropic Research" mentions, no mentions of other labs. I'd assume Apple already had access to whatever the most powerful model is at the various US-based labs, but perhaps not?

Apple also hosts a copy of Claude internally in their servers.

Re: About the security content of macOS Tahoe 26.6

#16

Post by darkwater »

nkrisc wrote: post #10
proactivesvcs wrote: post #9

Earlier quoted context omitted.

One of them lists an anonymous person! CVE-2026-43744: Mathis Mansière, an anonymous researcher

It reads as if "an anonymous researcher" is describing Mathis Mansière, which is quite humorous.

Spell checker fixed a typo, it was originally "an Anonymous researcher" /s

Re: About the security content of macOS Tahoe 26.6

#18

Post by pjmlp »

Map the amount of fixes with "... improved bounds checking...", "...improved memory handling...", "...improved memory management..." into the amount of developer, QA and release management teams salaries per hour, versus other stuff they could be working on, and that gives an approximate value of how using specific languages maps into monetary loss, and why companies are starting to care nowadays, given computers are always exposed to the world network.

Re: About the security content of macOS Tahoe 26.6

#19

Post by cromka »

senadir wrote: post #14
embedding-shape wrote: post #2

Lots of "in collaboration with Claude and Anthropic Research" mentions, no mentions of other labs. I'd assume Apple already had access to whatever the most powerful model is at the various US-based labs, but perhaps not?

Apple also hosts a copy of Claude internally in their servers.

Do they? As in Claude but on premises? Wonder if this is gonna be the solution that e.g. banks will require, exactly like they do now for cloud services (e.g. Azure on premises).
Post reply on HN