Hacker Newsnew | past | comments | ask | show | jobs | submit | brigandish's commentslogin

As far as I recall, Apple does not do reproducible builds or show you the checksum of the built product, so how would one know that the software installed is the software they saw the source for?

I mean, that sounds a lot more like you're concerned about Apple shipping you insecure software, because it's strictly harder to audit what you have from them compared to what you'd get from this tool.

Stop updating the OS. It gets a tad annoying that not all apps will continue to work, but that's what the web is for.

Sadly not updating the OS is very bad from a security perspective. Though it's frustrating that Apple rarely provides any sort of "security fix only" updates, and to fix security issues you just have to install all the new things at once.

My experience has been that they do provide those updates, but they intentionally make it hard to notice compared to getting the major version updates that are available for the OS. I distinctly remember a new junior engineer out of college joining my team back in maybe 2022, seeing there were security updates, and then not noticing the button saying something like "more updates" to be able to get them without updating to the latest major version of MacOS.

More recently, at the end of August, by the dates on my screenshots on my work laptop (the only Apple device I use) I took screenshots because I was incredulous of the sheer audacity of the UI shown for updating from MacOS 15.7.7 to 15.7.9 along with, in the words of the update UI, "1 more" update. When I clicked the button to view all of the available updates, it showed three available updates, which were, in order, MacOS 26.6.2 (which was checked), MacOS 15.7.9 (which was unchecked), and Safari 26.6.1 (which was checked). They literally previewed the only update that was not checked despite not even sorting it at the top of the list of updates available to install. I have absolutely no clue what would have happened if I clicked the "Update now" button next to the prompt for 15.7.9 rather than the identically-styled-to-non-link-element text for viewing the full set of updates, but at absolute best it would have just done something entirely different than what I'd get from the default options when viewing the expanded list, and it seems far more likely that it would have just also done the default options of the expanded view and updated to a completely different version that it put next to the update button.


on MacOS they provide security fixes for two years for unsupported OSes (after that the only remaining security protection is Gatekeeper/Notarization). On iOS you generally get no security fixes unless the vulnerability is really bad

AFAIK Apple has no published policy. Their last several macOS releases have received 3 years of security fixes.

iOS now seems to get 5 years of security updates, but only for devices that can't upgrade to newer iOS versions - so iOS versions that don't strand any devices get cut off early. e.g. iOS 15 received 3 updates in 2026, but iOS 17 hasn't been updated since 2025.


Ah, good to know. I didn't know about the iOS security updates for devices that can't upgrade

I recently sold a nine year old iPad running iOS 17 that is still getting security updates (17.7.11 a few months ago). Even iOS 15 (released 2021) got a security update in May.

I believe if you have a much older iDevice that no longer supports the latest OS, they will keep releasing security updates for that device for a long time, which is good on them. But if you have a newer device, after awhile the only way to get security updates is a major version upgrade. You luck out if your device happens to be old enough not support to newer iOS versions.

Yeah, this is very clearly the 1-3 years of updates you have to just skip while they figure it out. Like Win11 or the Touch Bar.

> I don't think the grand social goal is to maximize economic growth. It's a stable healthy society.

The contentious part of that statement is what constitutes "healthy" and "stable". Look at Japan, stuck in a long deflationary period that looks like it will end very badly and is already going badly. They are very stable though.

That, for me, makes growth look much more tempting as a choice for what constitutes healthy.


What kind of toxicity are females experiencing when entering Rubik’s cube competitions?

I think it’s more likely that people often don’t like being in a noticeable out group, and that females experience that more negatively than males, so they skip it.

No need to blame anyone, and it doesn’t deny the attempt to help females participate.


Easy now, I’m sure there are plenty of people on this forum that can remember the 60s.

anyway I don't get what has official name since 60s to do with how people commonly called it up until recently, at least in 90s it was frequently called positive discrimination, heck I even remember when black people could be called black and not african american

judging by the response I assume "positive discrimination" ain't mainstream anymore in the US


Only if demand increases to the point where supply cannot meet demand in a short enough time frame. Capacity is a factor here.

You buying a doughnut - even half the doughnuts - from a doughnut shop does not increase the price of the remaining doughnuts unless they can't make enough to satisfy remaining demand and people are willing to outbid you rather than wait.

Does that power station have enough capacity to satisfy the remaining demand?


What would being prepared look like? A house in the woods with a store of food? Knowing how to pick door locks and set up a militia in the desert?


I've seen several strangely dead comments today, perhaps the automated filter has been updated and has some gremlins?


The competition is between:

- needing to look in several places

- looking in one place

Easy to see why Twitter wins, even when information isn't exclusive, which it often is (I would've suggested video involved in news events, which is often impossible to find elsewhere but easily gathered on Twitter).


jjui is the killer feature for me

https://github.com/idursun/jjui


Consider applying for YC's Winter 2027 batch! Applications are open till November 2.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: