PDA

View Full Version : Security Update 2004-09-16




MacRumors
Sep 16, 2004, 08:12 PM
Now available via Software Update:
Security Update 2004-09-16 delivers a number of security enhancements and is recommended for all Macintosh users. This update includes the following component:

iChat

For detailed information on this Update, please visit this website: http://www.info.apple.com/kbnum/n61798

There are updates for 10.2.8 + iChat 1.0, 10.2.8 + iChat 2.0, and 10.3.5 + iChat 2.1.



Daveway
Sep 16, 2004, 08:13 PM
I didnt think iChat needed a patch, to me it works fine.

Rower_CPU
Sep 16, 2004, 08:14 PM
No info yet as far as what the update fixes.

Armsreach
Sep 16, 2004, 08:15 PM
Shouldn't this have just been an iChat update?

rog
Sep 16, 2004, 08:15 PM
the knowledge base info link only tells about the 9/7 update. What's new in this. Isn't Apple having a lot of these lately? What gives?

Abstract
Sep 16, 2004, 08:16 PM
Wow, Mac users get more frequent security patches than Windows does. Sweet!

spikymohawks
Sep 16, 2004, 08:18 PM
y does macrumors need to post these security updates on their homepage. it could at least be on p. 2. Maybe cause they dont have enough rumors anymore... hint hint macrumors

swissmann
Sep 16, 2004, 08:19 PM
I'm sick of all these security updates. Can't everyone just leave everyone else alone? Let's unlock our front doors and simplify computing. ;)

fluidinclusion
Sep 16, 2004, 08:19 PM
Wow, Mac users get more frequent security patches than Windows does. Sweet!


That's ok because they actually work.

millarj
Sep 16, 2004, 08:19 PM
Whoo Hoo! Installed and the ftpd bug is fixed. If I can just keep the flames from shooting out of the optical drive door, this would be a perfect update. :)

robotrenegade
Sep 16, 2004, 08:21 PM
It must be a Security month.

mowogg
Sep 16, 2004, 08:25 PM
Wow, iChat feels so much snappier! :)

invaLPsion
Sep 16, 2004, 08:30 PM
After updating my dual 2.5 didn't restart...

Had to manual shut down then restart...

hmmmmmm :cool:

PrometheusG5
Sep 16, 2004, 08:34 PM
Werent there rumors of an iPod mini software update a couple of weeks ago? Where is it, Apple?

Trekkie
Sep 16, 2004, 08:35 PM
y does macrumors need to post these security updates on their homepage. it could at least be on p. 2. Maybe cause they dont have enough rumors anymore... hint hint macrumors

Go back to the home page and look at the macrumors icon at the top of the page, under it, it says 'news and rumors you care about'

This article would be in the NEWS category ;)

Trekkie
Sep 16, 2004, 08:36 PM
After updating my dual 2.5 didn't restart...

Had to manual shut down then restart...

hmmmmmm :cool:

Mine didn't say it needed a restart, so why restart?

Cowtown
Sep 16, 2004, 08:38 PM
Prior to the security update, it was possible to launch applications by clicking on an FTP link; for example, if you clicked on ftp:///Applications/iTunes.app, it would launch iTunes. This no longer occurs.

MacFan26
Sep 16, 2004, 08:43 PM
Mine didn't say it needed a restart, so why restart?
Hm, mine did say restart.

Interesting about the FTP link thing. Was this the entire reason for the update? I don't understand what the security risk is.

kcmac
Sep 16, 2004, 08:45 PM
Mine didn't say it needed a restart, so why restart?

Going for uptime? It did say to restart. I ran permissions afterwards and it found a few things.

MoparShaha
Sep 16, 2004, 08:54 PM
y does macrumors need to post these security updates on their homepage. it could at least be on p. 2. Maybe cause they dont have enough rumors anymore... hint hint macrumorsSoftware updates are a big deal, and I appreciate it being on the front page. If you haven't noticed, Macrumors is a community, and being such, it is a forum for many topics. There is not a censor in place to limit things only to "rumors".

Tuttle
Sep 16, 2004, 08:57 PM
Restart?!?

Get your act together Apple. An iChat patch does not require a restart.

yellow
Sep 16, 2004, 09:04 PM
Personally, I won't be installing this until the webpage says what the heck it's all about..

LimeLite
Sep 16, 2004, 09:06 PM
Restart?!?

Get your act together Apple. An iChat patch does not require a restart.

Uh, I think they know when their updates require a restart or not.

Tuttle
Sep 16, 2004, 09:13 PM
Uh, I think they know when their updated require a restart or not.

Wrong.

There is no excuse for userland patches to require a system restart. A logout, maybe.

King Cobra
Sep 16, 2004, 09:21 PM
There is no excuse for userland patches to require a system restart. A logout, maybe.
Well then how about a reality check? Security updates modify the core resources of OS X, and if you just quit the installer, rather than restart, parts of the OS with information about the resources stored from before the update will attempt to read information from the modified resources, potentially causing conflicts and/or kernel panics. A restart clears out the pre-modified information from RAM with the updated information. I think that's what generally happens...if not, then somebody correct me.

Trekkie
Sep 16, 2004, 09:24 PM
Hm, mine did say restart.

Interesting about the FTP link thing. Was this the entire reason for the update? I don't understand what the security risk is.

Of course, 30 seconds after I posted that it popped up 'you must restart'

sigh. oh well, open mouth insert foot.

jeffgarden
Sep 16, 2004, 09:46 PM
:p i just finished cloning and updating a Mac lab with 30 Powermacs this morning before this update showed up

at least now i finally have an excuse to try out Apple Remote Desktop 2

Stella
Sep 16, 2004, 09:50 PM
Another so soon - we've just updated 1.1 - could have not have rolled the fix into this one?!

aswitcher
Sep 16, 2004, 09:59 PM
Mmm...every patch seems to have had problems recently so I might hold off on this one...

Poeben
Sep 16, 2004, 10:01 PM
After updating my dual 2.5 didn't restart...

Had to manual shut down then restart...

hmmmmmm :cool:

Mine kind of half shutdown. Desktop went away...screen went to sleep then nothing...oops---wait....here it comes..lol...it took a few minutes. ALL CLEAR! Whew.

Edit: Also, it seems after just about every update, the CPU temp readings go up about 40 degrees.. strange. I'm going to wait a bit then do a hard shutdown.

AhmedFaisal
Sep 16, 2004, 10:02 PM
For whatever reason my iSight doesn't work with iChat. No matter what I do (incl. iChatUSBCam & the IOXperts Driver) iChat only gives me a black image from my iSight (1.0.2 Firmware). The Webcam works fine in any other application. Anyone got an idea?
Regards,

Ahmed

bousozoku
Sep 16, 2004, 10:11 PM
Restart?!?

Get your act together Apple. An iChat patch does not require a restart.

It's more a matter of putting the patch's contents into a staging area so that they can be loaded into the correct place during the restart. Besides, there are two pieces to iChat--the iChat application and iChat Helper.

Porchland
Sep 16, 2004, 10:17 PM
y does macrumors need to post these security updates on their homepage. it could at least be on p. 2. Maybe cause they dont have enough rumors anymore... hint hint macrumors

Agreed. It has settled into a news site, and there's plenty of those out there. I pretty much use it for the chats.

You would think that as many people as there are working for Apple, working for Apple vendors and outside marketing/advertising people that there would be more rumors than there are.

sockeatingdryer
Sep 16, 2004, 10:30 PM
I almost thought that is was a 'real' update for iChat... like 2.2 or something. ;)

Oh, well, it doesn't seem any slower... come to think of it, I've never had any problems with the patches, OS 9, or most things people complain about. Maybe I just have "the touch." LOL :)

Macmaniac
Sep 16, 2004, 10:32 PM
Downloaded an installed, no gripes for now.

Rower_CPU
Sep 16, 2004, 10:37 PM
Agreed. It has settled into a news site, and there's plenty of those out there. I pretty much use it for the chats.

You would think that as many people as there are working for Apple, working for Apple vendors and outside marketing/advertising people that there would be more rumors than there are.

We haven't "settled into" anything, as far as I've seen. We just have to go on what credible leads we're given and those have been mighty sparse lately. We're not going to start making stuff up to get traffic like some other sites do, though we often do report on them and give our assessment of its probability.

Plus, the rumor community is so quick to jump on something that a rumor is often submitted to all the sites at roughly the same time and we all have the same info.

izzle22
Sep 16, 2004, 10:39 PM
Mine kind of half shutdown. Desktop went away...screen went to sleep then nothing...oops---wait....here it comes..lol...it took a few minutes. ALL CLEAR! Whew.

Edit: Also, it seems after just about every update, the CPU temp readings go up about 40 degrees.. strange. I'm going to wait a bit then do a hard shutdown.


How Do You know what Your CPU Temp. Is??

point665
Sep 16, 2004, 10:46 PM
How Do You know what Your CPU Temp. Is??

Im pretty sure he uses a temperature monitoring app, there are plenty of them, but only some versions of some models support them... Example my iBook... some PPC750s (800mhz) have temperature monitors that can be read by software, my does not.

izzle22
Sep 16, 2004, 10:49 PM
Im pretty sure he uses a temperature monitoring app, there are plenty of them, but only some versions of some models support them... Example my iBook... some PPC750s (800mhz) have temperature monitors that can be read by software, my does not.

Thanx! Do you know if there is a monitor for G5 powermac?

t300
Sep 16, 2004, 11:11 PM
It is hilarious that some people get so pissed off because they have to restart their Mac...

Chryx
Sep 16, 2004, 11:12 PM
After updating my dual 2.5 didn't restart...

Had to manual shut down then restart...

hmmmmmm :cool:

My ibook sorta restarted, it sat at a blue screen with the 'rotating circle of lines' thing at the bottom

then I nuked it from orbit and restarted, came straight back up.


my Cube on the other hand, went through without a hitch.

point665
Sep 16, 2004, 11:20 PM
Thanx! Do you know if there is a monitor for G5 powermac?

http://www.bresink.de/osx/TemperatureMonitor.html - Try that, I cant find the compatibility list anymore.

Anyone notice http://www.apple.com/support/downloads/ still shows iTunes 4.5 ?!... Someone has been slacking.

point665
Sep 16, 2004, 11:28 PM
My iBook restarted fine and booted up faster than normal but thats probally because minutes before hand I did the 9-07 update.

yg17
Sep 16, 2004, 11:31 PM
my g3 iBook restarted like normal, no problems here.

heck, I dont even use iChat but I upgraded anyways

iMeowbot
Sep 16, 2004, 11:31 PM
After updating my dual 2.5 didn't restart...

Had to manual shut down then restart...

Two Macs here waited a very, very, very long time at the blue screen with the rotating blades of impending doom, but eventually they did reboot on their own.

Abstract
Sep 17, 2004, 12:12 AM
Software updates are a big deal, and I appreciate it being on the front page. If you haven't noticed, Macrumors is a community, and being such, it is a forum for many topics. There is not a censor in place to limit things only to "rumors".

News is what MacBytes is for. MacRumors is for rumours, no? This isn't a rumor. Why even have MacBytes? I've seen no difference in the news that I've seen. I don't visit MacBytes because I don't have to.....it seems like all the important stuff is posted at MacRumors anyway.

må¥å
Sep 17, 2004, 12:33 AM
something tells me we will see another x.1 update for this security update :D


People have been having issues with they iSight not displaying video in iChat. :(



Works fine for me no problems, then again I don't use iChat :)

FuzzyBallz
Sep 17, 2004, 01:10 AM
Apparently some people like to keep their system up 365 days a year even though there's nothing running in the background and neither is it a server. Hmmm...

I'm gonna skip this patch. Not having any probs w/ iChat as is.

feeze
Sep 17, 2004, 01:13 AM
Hm, mine did say restart.

Interesting about the FTP link thing. Was this the entire reason for the update? I don't understand what the security risk is.

According to the security article (http://docs.info.apple.com/article.html?artnum=61798) that is the exact reason for the update.
Security Update 2004-09-16

iChat
CVE-ID: CAN-2004-0873
Impact: Remote iChat participants can send "links" that can start local programs if clicked
Description: A remote iChat participant can send a "link" that references a program on the local system. If the "link" is activated by clicking on it, and the "link" points to a local program, then the program will run. iChat has been modified so that "links" of this type will open a Finder window that displays the program instead of running it. Credit to <aaron@vtty.com> for reporting this issue.
Availability: This update is available for the following iChat versions:
- iChat AV v2.1 (Mac OS X 10.3 or later)
- iChat AV v2.0 (Mac OS X 10.2.8)
- iChat 1.0.1 (Mac OS X 10.2.8)

bviz2
Sep 17, 2004, 01:18 AM
Apple has updated the security site with a description of the issue:

http://docs.info.apple.com/article.html?artnum=61798

[prune....someone beat me to it....]

ifjake
Sep 17, 2004, 01:36 AM
doesn't seem like it should be a reason to restart the system, but then again restarting the system doesn't seem like a reason to get upset.

MacFan26
Sep 17, 2004, 02:09 AM
According to the security article (http://docs.info.apple.com/article.html?artnum=61798) that is the exact reason for the update.
That's quite interesting. I didn't even know there was that functionality to begin with. :rolleyes:

iMeowbot
Sep 17, 2004, 02:50 AM
doesn't seem like it should be a reason to restart the system, but then again restarting the system doesn't seem like a reason to get upset.
They replaced the IM framework, not the iChat application. Whenever shared libraries are modified, Apple like to force a reboot since they can't know for certain if third-party programs are also trying to use it. It's a very smart move on their part since Mac customers aren't expected to realize that their computers run Unix, let alone know about library dependencies for all the programs they run.

gorkonapple
Sep 17, 2004, 02:54 AM
I would not call this a security update as it's not really a problem of security unless you click on the link. It's more of a stupid user fix. How many stupid users would then click on the icon in the Finder??

Westside guy
Sep 17, 2004, 03:40 AM
I would not call this a security update as it's not really a problem of security unless you click on the link. It's more of a stupid user fix. How many stupid users would then click on the icon in the Finder??

Well, as long as you cut Microsoft the same slack when similar IE bugs are found - as they are, too frequently... :D

This makes me think of the shell-launching URL bugs that were found in IE and in Mozilla just a little while ago. Not really a bug in the application itself; but rather what the OS was willing to let the application do. Actually, that also probably explains why this patch required a reboot.

Windowlicker
Sep 17, 2004, 03:43 AM
Wow, Mac users get more frequent security patches than Windows does. Sweet!

it's not sweet. when there are updates available it also means that there are vulnerabilities. of course it's far better than having those vulnerabilities and no patches to fix them.

macridah
Sep 17, 2004, 03:47 AM
I don't mine this occasional security updates, I don't think most of the are critical, not like Microsoft. This patch installed smooth, and iChat is kinda snappier.

encro
Sep 17, 2004, 05:46 AM
I don't mine this occasional security updates, I don't think most of the are critical, not like Microsoft. This patch installed smooth, and iChat is kinda snappier.

Saying "[Insert Apple Application Update Here] seems snappier" has almost become as annoyingly bad as Slashdot's "Imagine a Beowolf cluster of these..." or "but does it run Linux?".

It's cliché now so please everybody just stop, the joke is over, take your placebo and enjoy it in private. There is no difference to your application speed!

AmigoMac
Sep 17, 2004, 06:29 AM
Installed, everything runs ok, it just messed my Mail.app settings a bit, after the restart it showed the "in MAilbox" column ... I already fixed that, ...iChat...hmm, by now I'm using Adium... that duck rules!

MacFan782040
Sep 17, 2004, 06:53 AM
News is what MacBytes is for. MacRumors is for rumours, no? This isn't a rumor. Why even have MacBytes? I've seen no difference in the news that I've seen. I don't visit MacBytes because I don't have to.....it seems like all the important stuff is posted at MacRumors anyway.

IMO-- MacBytes is for news articles/ web pages/ pictures / opinions about Apple. MacRumors is for news and rumors that I care about. I don't want to go to MacBytes and see this patch mixed in with everything else on there. It's a good idea to put this on MR home page, or else I wouldn't know about it right now. Leave MacBytes for articles.

swissandrew
Sep 17, 2004, 07:52 AM
I'm one of the poor souls who can't now get iSight to work. Well I can, I get onto the floor, go round the back of Power Mac, pull out the firewire cable, go to 'restart', wait until iChat times it out 4 or 5 times (iChat won't force quit), restart, open ichat, slide round the back of the mac, plug in iSight again. Then it works.

I suppose if iChat stops working then it's more secure - no one can send me one of those dodgy links :rolleyes:

AmigoMac
Sep 17, 2004, 08:00 AM
I'm one of the poor souls who can't now get iSight to work. Well I can, I get onto the floor, go round the back of Power Mac, pull out the firewire cable, go to 'restart', wait until iChat times it out 4 or 5 times (iChat won't force quit), restart, open ichat, slide round the back of the mac, plug in iSight again. Then it works.

I suppose if iChat stops working then it's more secure - no one can send me one of those dodgy links :rolleyes:

I'm not sure but you may try just closing the lens, rotate it to one side then the other and iChat should start... at the beginning for whatever reason I has that problem and it helped, since a long time I haven't had issues with iSight, hope it helps, so you don't have to drag yourself for every chat...

1macker1
Sep 17, 2004, 09:05 AM
Anothe secuirity update. They are coming in weekly it seems. But i'd rather be safe than sorry.

soosy
Sep 17, 2004, 09:41 AM
I would not call this a security update as it's not really a problem of security unless you click on the link. It's more of a stupid user fix. How many stupid users would then click on the icon in the Finder??

I was thinking the same thing. It almost borders on sacrificing functionality just to protect stupidness....

On the other hand it's a very very minor thing that I didn't even know existed so oh well :)

brap
Sep 17, 2004, 10:03 AM
I was thinking the same thing. It almost borders on sacrificing functionality just to protect stupidness....
On the other hand it's a very very minor thing that I didn't even know existed so oh well :)
At least Apple are working on fixes to prevent stupid users, and things you'd never think of; unlike some nameless other nameless vendors who can't seem to close all the holes.
...although maybe the guys working iChat at Cupertino would be better used getting that Tiger to us a bit quicker :rolleyes:

toughboy
Sep 17, 2004, 10:26 AM
is it normal for an operating system as solid-rock as Mac OSX to have to be updated for security this often?

yellow
Sep 17, 2004, 10:42 AM
is it normal for an operating system as solid-rock as Mac OSX to have to be updated for security this often?

If there are that many vulnerabilities found in pieces/parts of the OS, definitely. I'd rather have move updates to contend with that coping with a compromised machine.

superbovine
Sep 17, 2004, 10:47 AM
I didnt think iChat needed a patch, to me it works fine.

ichat wasn't broken, it just that some of the functionality in ichat could be exploited to compromise your computer.

macnews
Sep 17, 2004, 10:50 AM
is it normal for an operating system as solid-rock as Mac OSX to have to be updated for security this often?

I think this is one thing that make OS X as "solid-rock" as it is. No system is perfect. Some one, some where will find a way to exploit it. To say otherwise is just wrong and not being realistic.

The fix isn't the problem but rather the concern is you start getting to many then people feel like they can't "compute safe" and don't bother with updating. Conversly, if Apple holds back and rolls many updates in to one then the system could be left vulnerable. I think Apple has done a fairly good job providing timely updates but not overwhelming the consumer. This time, however, I have to agree with some of those who asked why this couldn't have been rolled in to the update only a few days ago? There could be many reasons and most likely either way Apple would have people complaining.

toughboy
Sep 17, 2004, 10:50 AM
If there are that many vulnerabilities found in pieces/parts of the OS, definitely. I'd rather have move updates to contend with that coping with a compromised machine.

Me too.. I understand that nothing can be perfect too, but werent these updates released a bit "frequent" these days???

yellow
Sep 17, 2004, 10:55 AM
There HAS been a flurry of them over the past 3 weeks or so.

The Red Wolf
Sep 17, 2004, 11:44 AM
Wrong.

There is no excuse for userland patches to require a system restart. A logout, maybe.

Its not an iChat update. Its a security update. This requires the system to be changed. That change, requires a restart.

wdlove
Sep 17, 2004, 11:58 AM
At least Apple are working on fixes to prevent stupid users, and things you'd never think of; unlike some nameless other nameless vendors who can't seem to close all the holes.
...although maybe the guys working iChat at Cupertino would be better used getting that Tiger to us a bit quicker :rolleyes:

I agree, although it does seem that there has been several lately.

I think that Steve has an adequate number working on Tiger. Confident that they are progressing at a steady pace.

rikers_mailbox
Sep 17, 2004, 12:46 PM
hrmph. the update turned off all my menu bar options (ie clock, battery meter, airport status) and iChat refused to open. A quick permissions repair and I was back in business. Maybe I'm just grumpy this morning, but it was kind of annoying.

ah well, now i can sleep at night knowing iChat won't start apps without warning. :rolleyes:

KD7IWP
Sep 17, 2004, 01:07 PM
I dunno, I can't open ichat now. The drop down list at top says who is on, but I just get an error beep when I click buddy list or try to double click it in finder.

DPazdanISU
Sep 17, 2004, 01:33 PM
THANK YOU AARON FOR HELPING THE MAC WORLD BE FREE OF CRAZY AIM/PC LIKE PROBLEMS. IF IT WERE NOT FOR AARON OUR MACWORLD WOULD BE MORE LIKE MY PANTS, CRAPPY. :confused:

iomar
Sep 17, 2004, 02:57 PM
This update for some reason missed up my Entourage Mail program. I am not sure why, but it was working right before this update after it it is not working properly. None of the icons work now. When I click on any of them including Send & Recive icone noting happens. If select them from the pull down menues it is fine. I don't know if anyone else experience this kind of problem. It is very stranage, I tired deleting the preference files, retarted my computer noting seem to fix this problem. Anyway, just wanted to mention this.

tmornini
Sep 17, 2004, 05:46 PM
For whatever reason my iSight doesn't work with iChat. No matter what I do (incl. iChatUSBCam & the IOXperts Driver) iChat only gives me a black image from my iSight (1.0.2 Firmware). The Webcam works fine in any other application. Anyone got an idea?


I had a weird issue that took me a while to figure out.

PostgreSQL, compiled from source, appears to conflict with iChat and iSight.

I didn't get black video, but I did get a message saying something like
no video was available

CubaTBird
Sep 17, 2004, 05:47 PM
Finally I can now see pics that my friends on their pc's send me! Before I would just get a big pic of a file format... This is great... Keep up the good work apple. :)

Nicholas Knight
Sep 17, 2004, 06:13 PM
THANK YOU AARON FOR HELPING THE MAC WORLD BE FREE OF CRAZY AIM/PC LIKE PROBLEMS. IF IT WERE NOT FOR AARON OUR MACWORLD WOULD BE MORE LIKE MY PANTS, CRAPPY. :confused:
I'm blind!!!! :eek:

Please don't type in all caps. Thanks.

I understand the reasoning for this patch, but really... Considering what it fixed, was it the computer that needed patching or the people without the knowledge to prevent the security risk? :rolleyes:

The more popular that Mac OS X becomes, the more inevitable it is that we will have more and more security risks being discovered and fixed. As you become a greater target, that's bound to happen.

Xtremehkr
Sep 17, 2004, 06:33 PM
Not only did I download this latest patch but I downloaded 10.3.5 which for some reason wasn't showing up on the automatic update function. And, I updated Appleworks to the latest version.

No problems so far, holding my breath. No iSight either, that'll come with the new iMac. I've had pretty good luck with upgrades and patchs so far. Maybe I'll offer my G3 iMac as a lab rat for future downloads.

What is all the controversey surrounding the 10.3.5 update about?

FYA
Sep 17, 2004, 08:39 PM
Not only did I download this latest patch but I downloaded 10.3.5 which for some reason wasn't showing up on the automatic update function. And, I updated Appleworks to the latest version.

No problems so far, holding my breath. No iSight either, that'll come with the new iMac. I've had pretty good luck with upgrades and patchs so far. Maybe I'll offer my G3 iMac as a lab rat for future downloads.

What is all the controversey surrounding the 10.3.5 update about?

Same here, I've installed every patch and update that Apple has thrown my way, and everything runs as it did before.

I've been running Panther since week 2, with zero problems.

I don't mind the updates and patches, it means that the people at Cupertino are doing their job.

I do wish I had known about the dodgy link thingy before, It would have been cool to mess around with my mates mac.

I have one question...

How come everybody here loves their OS and praise the people @ Apple for it, but as soon as they release an update or patch everyone starts panicking because it might break something.???

my 2 cents. :rolleyes:

wdlove
Sep 18, 2004, 01:30 PM
Same here, I've installed every patch and update that Apple has thrown my way, and everything runs as it did before.

I don't mind the updates and patches, it means that the people at Cupertino are doing their job.

I do wish I had known about the dodgy link thingy before, It would have been cool to mess around with my mates mac.

I have one question...

How come everybody here loves their OS and praise the people @ Apple for it, but as soon as they release an update or patch everyone starts panicking because it might break something.???

my 2 cents. :rolleyes:

I agree, no problems since starting OS X and Panther this past January.

To your question, I just think that Mac Geeks are a cautious group.

allpar
Sep 18, 2004, 04:54 PM
I've always just done the updates - NEVER Archive & Install - and never had problems. A&I causes more time delays than it's worth...on those rare occasions when it helps and frankly from what I've seen in MacFixit, it usually hurts as much as it helps.

Anyway - I didn't get this update because I deleted iChat. :)

I think the main reason for posting the updates is to hide the fact that this site isn't updated very often any more. I'd just as soon see them on page 2.

yellow
Sep 18, 2004, 04:57 PM
A&I causes more time delays than it's worth...on those rare occasions when it helps and frankly from what I've seen in MacFixit, it usually hurts as much as it helps.

I'd have to totally disagree with the previous poster.
A&I is quite useful when it's called for.
Especially in the Jaguar -> Panther move, and I suspect Panther -> Tiger move as well.
I've never had it "hurt me" in the many times I've used it supporting all the Macs that I support (~200).

allpar
Sep 18, 2004, 05:03 PM
Especially in the Jaguar -> Panther move, and I suspect Panther -> Tiger move as well.

So why exactly is it more useful than doing the default? What's the advantage of archive & install?

yellow
Sep 18, 2004, 05:11 PM
You mean, A&I versus clicking the Upgrade button?

There were a number of things that were incorrectly installed or not even installed at all when one Upgraded from Jaguar to Panther. Some of the more important ones dealt with passwords. Shadow hashing and parsing of a password longer then 8 characters are HUGE. Neither of these make it into an "Upgrade". More secure (system/app) users and groups aren't installed. There's more, Google if you want to read more. I believe even MacFixIt suggested that an Archive and Install was a better idea when upgrading from Jaguar to Panther...

Doctor Q
Sep 18, 2004, 05:36 PM
I suspect (no proof) that archive & install has advantages mainly when you've customized the operating system, i.e., installed software other than in the Applications folder or your home folder. My theory is that if you've installed hacks, tinkers, etc., A&I gives you a cleaner starting place in case some of the hacks aren't upward compatible. You will have to reinstall such things, but that's probably a good idea.

itsa
Sep 18, 2004, 09:09 PM
Same here, I've installed every patch and update that Apple has thrown my way, and everything runs as it did before.

I've been running Panther since week 2, with zero problems.

I don't mind the updates and patches, it means that the people at Cupertino are doing their job.

I do wish I had known about the dodgy link thingy before, It would have been cool to mess around with my mates mac.

I have one question...

How come everybody here loves their OS and praise the people @ Apple for it, but as soon as they release an update or patch everyone starts panicking because it might break something.???

my 2 cents. :rolleyes:

Same here... never have any problems.

allpar
Sep 19, 2004, 08:41 AM
Macfixit always suggested A&I but then most of the problems they report are from people who did A&I...but the password issues are serious. Guess unless they fix that with 10.4 I'll do an A&I to go to 10.4. Shame, really, it's a PITA to do A&I.

yellow
Sep 19, 2004, 08:45 AM
I will concede that it can be a pain to do an A&I, especially if you have a lot of modified Darwin files and directories. I suspect that most of the MacFixIt complaints about A&I, though, were from people who really don't know what the hell they're doing, and just want a brainless solution.

allpar
Sep 19, 2004, 08:47 AM
We're not using Linux here. You SHOULD be able to do a painless A&I if you don't know what you're doing. Mac OS is not for computer professionals only. Indeed, one of my main complaints about X is the huge rough edges where you have to get expertise. Lowers the overall ROI.

What's more, those password fixes should have been built into the standard upgrade from Day One. Or they should have been addressed via Software Update or some other utility. It's inane for Apple to be risking what little credibility they have this way - their main selling points these days are security and ease of use.

yellow
Sep 19, 2004, 09:07 AM
We might not be LINUX users, but we are using UNIX. UNIX is complicated. It's the price we Mac users pay for stability and security.
The whole point of an A&I is to get you back to a vanilla install without having to wipe the whole drive. That part is easy. Putting all the pieces/parts back to make it look and perform like it did before, that part can be hard.

wdlove
Sep 19, 2004, 08:30 PM
Last evening I installed the Security update for 9/7 & 916. Disk Utility and ran Repair Permissions and rebooted per request. My Graphite dual 450 G4 is purring like a kitten. :)

thanos
Sep 20, 2004, 04:48 AM
mmm... my G4 (733 MHz, 10.3.5) has lost connection to the world since the 2004-09-16 update. AppleShare is OK but none of the internet applications (Safari, Mail,...) work anymore. Anyone seen anything similar? What is wrong?

uv23
Sep 20, 2004, 08:49 AM
I lost audio after doing this update on my 1GHz 12" PB. Was fine after rebooting. That's actually happened once before after running an update. Odd.

Ja Di ksw
Sep 20, 2004, 05:09 PM
Great! Now I can finally have a profile with iChat, see icons move, have my away message pop up . . . . . . oh wait. Cr**. Oh well, I still like iChat.

bousozoku
Sep 20, 2004, 06:25 PM
Things have been pretty stable since installing this security update but last night while quitting UT2004, I got a kernel panic. Today, after playing UT2004, I started Firefox and any text generated by the browser was thinner than usual. Logging out and logging in fixed the visible problem.

MacFan26
Sep 20, 2004, 07:22 PM
Great! Now I can finally have a profile with iChat, see icons move, have my away message pop up . . . . . . oh wait. Cr**. Oh well, I still like iChat.
:eek: You almost got me excited there for a minute :)

evands
Sep 21, 2004, 04:32 AM
Great! Now I can finally have a profile with iChat, see icons move, have my away message pop up . . . . . .
Hm, sounds familiar to me...

iSaint
Sep 23, 2004, 11:24 AM
I downloaded the security update a few days ago (when it came out I think) with no problems. But now I am getting notification to download the same update. What gives?

Mechcozmo
Sep 24, 2004, 01:21 AM
Same. I thought that I had installed it...but now it wants to do it again? Same version number, etc. The iMac is good though.

Maybe I should try it again?

wdlove
Sep 24, 2004, 12:36 PM
Same. I thought that I had installed it...but now it wants to do it again? Same version number, etc. The iMac is good though.

Maybe I should try it again?

I got the same message on my G3 iBook last evening. Hopefully one of our Mac Geeks will have an answer.

Mac Dummy
Sep 24, 2004, 02:02 PM
Wow, Mac users get more frequent security patches than Windows does. Sweet!

Is that a good thing?