31–40 of 246 posts
Ahh, so they probably had to restart the QA on the whole release a few days ago (including FaceTime Audio and associated features) after adding the TLS fix at the last minute. It makes a bit more sense why they'd make us wait a few days, now.
Ahh, so they probably had to restart the QA on the whole release a few days ago (including FaceTime Audio and associated features) after adding the TLS fix at the last minute. It makes a bit more sense why they'd make us wait a few days, now.
It's still terrible. They should have pushed out a fix for this vulnerability first and push back 10.9.2 if necessary. Or perhaps introduce a modern package system for the base system.
Ahh, so they probably had to restart the QA on the whole release a few days ago (including FaceTime Audio and associated features) after adding the TLS fix at the last minute. It makes a bit more sense why they'd make us wait a few days, now.
It's still inexcusable. The security update should have been immediate and separate.
Does it fix the networking stack also? Please dear god let it fix the networking stack. ( https://discussions.apple.com/thread/5551686?start=0&tstart=... )
What about non-Mavericks versions of OS X?
> The release notes, however, do not make mention of the SSL security bug that was squashed on iOS late last week.
If anyone from Apple is reading and can influence this - could you convince whomever needs to be convinced that you ought to have less vague/shitty release notes, particularly wrt issues like this?
Is it possible to manually verify the code signature with Apple's built-in public key before installing?
The manual-download pages on http://support.apple.com/downloads/ publish SHA1 sums. Unfortunately those pages aren't served over SSL. You could download the update and compare its hash against those of your friends: at least then you'd all be installing the same thing (preventing narrowly-targetted attacks).
Is it possible to manually verify the code signature with Apple's built-in public key before installing?
pkgutil --check-signature OSXUpd10.9.2.dmg