schmuckonwheels (u/schmuckonwheels)

schmuckonwheels commented on iOS 26.2 fixes 20 security vulnerabilities, 2 actively exploited macrumors.com/2025/12/12/... · Posted by u/akyuu

1over137 · 13 hours ago

Not sure why you are so downvoted, because indeed Apple only does full security updates for the very newest (now 26): https://arstechnica.com/gadgets/2022/10/apple-clarifies-secu...

schmuckonwheels · 12 hours ago

Because it's factually incorrect.

Ars Technica, a clickbait aggregator whom should have been banned from this site long ago, is hardly a reliable source.

schmuckonwheels commented on iOS 26.2 fixes 20 security vulnerabilities, 2 actively exploited macrumors.com/2025/12/12/... · Posted by u/akyuu

plodman · 13 hours ago

There appears to be a dark pattern occurring where the Tahoe update is selected by default and you need to uncheck it to just install the security update.

schmuckonwheels · 12 hours ago

Is there a new technological space race between Microsoft and Apple, to see who can engineer more dark patterns into their software, forcing unwanted updates onto its users?

These techniques used to be exclusive to spyware distributors.

Dead Comment

schmuckonwheels commented on iOS 26.2 fixes 20 security vulnerabilities, 2 actively exploited macrumors.com/2025/12/12/... · Posted by u/akyuu

dangus · 12 hours ago

I would say it's almost certainly a mistake or some side-effect of their system that rolls out updates where they don't happen exactly simultaneously.

Remember that Apple is also pushing that update out to serve their iPhones that cannot get iOS 26. Even if I was to maximize my cynicism, I don't think they presently use security point releases in the manner you are describing.

schmuckonwheels · 12 hours ago

I don't think we can really ascertain intent, Apple has a long history of "the feature update IS the security update".

This partly relies on the "just update bro" attitude of sufficient fanbois to achieve upgrade momentum. Otherwise, let's be honest, no one would update, ever, our phones are too personal to be changing constantly.

This "bug" has been there for 2-3 days now. If it was a bug with their software delivery system, I assume it would have been fixed by now, it's affecting many people (with plenty of message board complaints to prove it).

schmuckonwheels commented on iOS 26.2 fixes 20 security vulnerabilities, 2 actively exploited macrumors.com/2025/12/12/... · Posted by u/akyuu

mat_b · 13 hours ago

It's unfortunate that Apple has taught me (and I assume others as well) over the last 15 years that the best practice is to never install a major OS update.

It seems clear to me that they use OS updates as a way to eventually slow your device down so the lag becomes so annoying that you want to purchase a new device.

(Edit: And the really obnoxious part is that they force you to receive upgrade prompts every single day and you can't disable it.)

schmuckonwheels · 12 hours ago

> And the really obnoxious part is that they force you to receive upgrade prompts every single day and you can't disable it

Enable iOS 18 Developer Beta and the nag screens go away.

schmuckonwheels commented on iOS 26.2 fixes 20 security vulnerabilities, 2 actively exploited macrumors.com/2025/12/12/... · Posted by u/akyuu

schmuckonwheels · 12 hours ago

Pro tip for anyone wanting to avoid liquid [gl]ass and install iOS 18.7.3: Apple is actively hiding 18.7.3 on most iPhones, despite the update showing on iPads. Perhaps a mistake, perhaps an attempt to force 26 onto users.

Simply select "iOS 18 Developer Beta" under beta updates (might need a developer account) and it will allow you to install it. The update currently offered is the production release.

schmuckonwheels commented on macOS 26.2 enables fast AI clusters with RDMA over Thunderbolt developer.apple.com/docum... · Posted by u/guiand

schmuckonwheels · 2 days ago

That's nice but

Liquid (gl)ass still sucks.

Posted by u/schmuckonwheels 2 days ago

Ask HN: What is your go-to breakfast?

schmuckonwheels commented on Linux CVEs, more than you ever wanted to know kroah.com/log/blog/2025/1... · Posted by u/voxadam

vpShane · 5 days ago

It did for Librewolf -- what I moved to from Firefox. Self-Signed certs I'm down with, http I'm not, and never will be for any reason. Plain-text data transmissions have no acceptable reasoning.

schmuckonwheels · 5 days ago

You do realize self-signed certs are useless, could have been tampered with, and could have just as easily been created by a malicious actor?

There's a reason most default self signed certs are called "snake oil".

schmuckonwheels commented on Linux CVEs, more than you ever wanted to know kroah.com/log/blog/2025/1... · Posted by u/voxadam

vpShane · 5 days ago

I enjoy this person's writings, and contributions. I am Linux's biggest fan and research cyber security daily.

I would prefer https.

schmuckonwheels · 5 days ago

I prefer a nice cappuccino, but sometimes all that's available is plain black coffee from the shared pot in the canteen (which someone could have tampered with).

But we drink it anyway (at risk) because it's free.

u/schmuckonwheels

KarmaCake day184July 24, 2025View Original