Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Apple's new macOS Sequoia update is breaking some cybersecurity tools

techcrunch.com

Post reply on HN
Print view View original

11–20 of 42 posts

Re: Apple's new macOS Sequoia update is breaking some cybersecurity tools

#11

Post by ripa »

salmo wrote: post #7
RockRobotRock wrote: post #6

Earlier quoted context omitted.

Is there even an equivalent to WSUS on macOS that lets admins block an update until it's tested?

Yeah. There’s Jamf and similar tools. Companies often block major updates until their 100 agents all officially support it. Oh, and do cool things like not letting you change your background or whatever random settings some admin decides are good.

Yep, a lot of these policies seem to come from some random person scrolling through a list of supported options and arbitrarily making up values that are enforced on people.

One of our policies enforce that screen savers must start after 20 minutes, and it’s not possible to reduce it (I have my personal on 3 minutes). Or the fact that it will constantly reset the UI notification volume to 100% and speaker output, even though have headphones almost always.

Infuriating.

Re: Apple's new macOS Sequoia update is breaking some cybersecurity tools

#13

Post by wpm »

RockRobotRock wrote: post #6
Spivak wrote: post #4

Earlier quoted context omitted.

This is the part I'm missing too. Major versions are the time to ship braking changes, did none of these companies bother to test their software that mucks deep in the plumbing of the OS?

Is there even an equivalent to WSUS on macOS that lets admins block an update until it's tested?

There is a configuration profile payload that can stop updates like major version changes for up to 90 days. You cannot stop them indefinitely from appearing in Software Update.

Re: Apple's new macOS Sequoia update is breaking some cybersecurity tools

#14

Post by evulhotdog »

yawnbox wrote: post #2

all my wireguard tunnels could not connect upon upgrade. disabling the macos firewall allowed me to use my tunnels again, fyi.

I read somewhere about old ESET rules being in the macOS firewall blocked various udp traffic. Quick Google might get you more information.

Re: Apple's new macOS Sequoia update is breaking some cybersecurity tools

#16

Post by eviks »

Spivak wrote: post #4
move-on-by wrote: post #3

> “As a developer of macOS security tools, it’s incredibly frustrating to time and time again have to deal with (understandably) upset users (understandably) blaming your tools for breaking their Macs, when in reality it was Apple’s fault all along,” I would like to understand this better. Were there not any beta releases that these companies could have tested with in advance? Or were changes made between the beta an…

This is the part I'm missing too. Major versions are the time to ship braking changes, did none of these companies bother to test their software that mucks deep in the plumbing of the OS?

They did, reported it, nothing changed.

It's an OS bug, you can't make it look good by invoking some generic "time to break" principle

Re: Apple's new macOS Sequoia update is breaking some cybersecurity tools

#17

Post by vigormortis »

bomewish wrote: post #12
yawnbox wrote: post #2

all my wireguard tunnels could not connect upon upgrade. disabling the macos firewall allowed me to use my tunnels again, fyi.

Tailscale affected?

It is for me. I've had to disable it on my mbp and ios devices; otherwise DNS lookups choke.

Re: Apple's new macOS Sequoia update is breaking some cybersecurity tools

#19

Post by Someone »

> At this point, it’s unclear exactly what is the issue

So, is this a bug in Sequoia or a change that affects these low-level tools? If the latter, they may not like it, but that’s par for the game on MacOS.

(Tried reading https://x.com/patrickwardle/status/1836862900654461270, referenced by sephamorr, but that link isn’t working for me)

Re: Apple's new macOS Sequoia update is breaking some cybersecurity tools

#20

Post by MichaelZuo »

move-on-by wrote: post #9
sephamorr wrote: post #8

Earlier quoted context omitted.

Per Patrick Wardle, this was well reported to Apple during beta. https://x.com/patrickwardle/status/1836862900654461270

Thank you, this makes the frustration in the above quote more understandable. For anyone wanting to avoid the x click: > Worth stressing this was reported to Apple before the GA was released (by multiple people, to multiple teams/orgs within Apple) so Apple 100% knew about this, and shipped macOS 15 anyways

Apple, or at least their teams responsible for answering feedback, rarely ever give substantial responses nowadays, regardless of how well documented the submission was. So it compounds the frustration.

And this isn’t even the most egregious case, sometimes the bugs are so obvious that they generate multiple hard faults, per hour, logged in Console, on a fresh installation with only the default apps running.

Post reply on HN