Apple Planning New Rapid Security Responses for iPhone, iPad, and Mac to Address Website Loading Issue

[zilchfox]

It's kinda nice that you can at least rollback on these RSR updates without having to start all over. Anyone remember the fiasco that was iOS 8.0.1? That update got pulled, but if you had already installed it, the only way to downgrade back to iOS 8.0 was to literally do a DFU restore via iTunes.

 

[HJ1987]

Their instructions are wrong - missing General as a step. Perhaps they can release a Rapid Response for that error too?

 

[podycust]

RSR may be what finally what causes me to leave the apple family at this point. Too many updates, too many failures, too many broken promises. It's easy to see why anyone would leave

But nothing in the RSR was broken… it was meta etc at fault because of their sloppy code apple shouldnt have pulled the update to force meta to fix their site

 

[Abthevolfan92]

But nothing in the RSR was broken… it was meta etc at fault because of their sloppy code apple shouldnt have pulled the update to force meta to fix their site

Will I get the Security Response (B) if I rolled back on (A) or is only the people who stuck with (A) going to get it?

 

[msackey]

RSR may be what finally what causes me to leave the apple family at this point. Too many updates, too many failures, too many broken promises. It's easy to see why anyone would leave

Hmm...you could decide not to install RSR types of updates and just leave it to the major dot versions.

 

[Premium1]

I haven't had a single problem with the (a) version and so I'm not uninstalling it... but I also don't use anything made by Meta. Perhaps I'm just lucky.

This issue is it wasn't just meta sites that were having the issues...

 

[Abthevolfan92]

Hmm...you could decide not to install RSR types of updates and just leave it to the major dot versions.

Don't know why we need so many security updates a .1 release is good enough

 

[msackey]

Don't know why we need so many security updates a .1 release is good enough

Because as vulnerabilities are discovered, it's a good idea to patch them. I think that's why the framework of RSR came about. In this age of connected devices, it's much easier to attack computers.

The days of when malware were primarily transmitted by the insertion of a floppy disk into your computer are long gone. In those days, malware did not spread as fast and exploitation of a computer often required physical access. Those days are long gone as the primary mode of computer hacking.

 

[podycust]

Will I get the Security Response (B) if I rolled back on (A) or is only the people who stuck with (A) going to get it?

Everyone should get it as b is higher than a or no letter

 

[Premium1]

Just another reason the apps should be de-coupled from the OS and updated through the app store. And don't hit me with the "but people don't update their apps" line because those same people won't install this rapid security update anyway.

 

[platinumaqua]

RSR for Safari/WebKit issues is fine for iOS, but why Mac OS? Mac OS has always sypported separate updates, and they used to be listed as a "Safari" update or "Security Update yyyy-nnn".

 

[ifxf]

Multiple browser technologies mean multiple attack vectors. Pick your poison.

Single solutions invite attacks, higher use means through a one solution means successful attacks spread faster. Just look at Windows.

 

[nt5672]

This is what happens when you decide to change things just to change things. It's not reasonable for Apple to expect everyone else to change their code because Apple arbitrarily decided to something different with their labeling. Regardless of whether the websites are coded well, they were coded well enough to work with every other version of Apple's operating systems.

Apple supposedly supports Semantic versioning for all things swift, but not for its own Apps. There is no (a) in Semantic versioning.

Again Apple without any strategic leadership. Why is this not a straight forward .x update? Who are they trying to fool?

 

[frou]

I at least give them props for not reusing the same version for the fixed fix. Some outfits do that and it's idiotic

 

[Digital Dude]

In my case, I did experience squirrley latency on a few websites with the M1 ipad. I just thought it was the usual iOS behavior. Looking forward to see if it actually resolves the issue. 🤷‍♂️

 

[t0rqx]

This is what happens when you decide to change things just to change things. It's not reasonable for Apple to expect everyone else to change their code because Apple arbitrarily decided to something different with their labeling. Regardless of whether the websites are coded well, they were coded well enough to work with every other version of Apple's operating systems.

Do you even know the amount of courage was needed to pull this off?

 

[t0rqx]

In the meanwhile the less tech-savy users have no idea whats going on.

 

[rjjacobson]

At this point, I feel like iOS 17.0 Beta 3 is more stable!

Well I left things on iPad and iphone as are since I use the FB and Instagram apps which are not affected. Also I seldom ever use Zoom except with one group on iPad hopefully the fix will be out for that soon.

Leaving it on most devices means for me my iPads, iphone which I use the most are protected from the WebKit malware exploit for now. I am sure in 24 hours apple will have fix for my MacBook and for ipad if I need to use zoom (very rarely)

 

[jib2]

they should have as meta have fixed their sloppy browser detect code

Apparently Meta (and Zoom) have updated their browser detection code. I have been using the (a) version since yesterday and as of today there are no problems on Facebook, Instagram or Zoom.

(I also used Facebook yesterday -- it was very easy to modify the User agent of Safari and continue to use all apps.)

 

[kkclstuff]

PSA
I think the update is effecting more than Safari...

Last night it installed, today started Mac Studio and no Sidecar between my iPad Pro (6th gen) and Mac Studio (error -455) Removed the update, and now everything works fine.

 

[JustSomebody12]

It’ll probably be labelled that visually in settings but the user agent will revert to 16.5.1 only

Is it just that?

I mean to change the user agent should require just a few lines of code…

 

[msackey]

RSR for Safari/WebKit issues is fine for iOS, but why Mac OS? Mac OS has always sypported separate updates, and they used to be listed as a "Safari" update or "Security Update yyyy-nnn".

I'm thinking because WebKit is probably not just used by Safari (the program) on macOS but is integral to other parts of its software, perhaps maybe even programs like Map? Not sure, but I doubt that WebKit is only used by Safari on macOS

 

[lkrupp]

So much speculation, misinformation, guessing going on here.

 

[_Spinn_]

I’m not uninstalling just because websites parse user agents wrong.

 

[Jay-Jacob]

Zoom launching a meeting but you could still click a click to join a meeting

I see. It all seem be website I don't use so probably why not affecting me and no idea if they work for me since I don't use them.