Got a tip for us?
Let us know
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Apple Releases macOS High Sierra 10.13.2 Supplemental Update With Spectre Fix
- Thread starter MacRumors
- Start date
- Sort by reaction score
We are all too stupid to have access to that information. After all any computer you buy is still Apple's and they will do as they damn please.
Then you simply misunderstand the standard operating procedure for Apple in security patches. The current lead OS receives all updates for stock apps as this type of OS level security updates. All previous OS get back ported security fixes to individual applications. These issues are exactly the same, just one is on the lead OS and the other is for the previous. As mentioned in one of my previous comments, what is surprising is that the actual kernel was rebuilt for this - which indicates that there are more 'changes' (note that I did not use the word fix) than just incrementing Safari to version 11.0.2 to fix or mitigate the "Spectre" vulnerability.
I guess that explains why a patch that is only 143 MB download is taking as long as a full OS upgrade to apply. I have a quad i7 Mini (late 2012) with an SSD and it's been updating for 15 minutes. Clearly it's doing more than writing a few hundred megabytes of files.
SecuritySteve said on the first page that the kernel has been modified in this High Sierra update.
On High Sierra this is being delivered as a security update. On El Cap and Sierra there is simply an update to Safari, which I'm assuming did not patch the kernel.
macOS High Sierra is not a hardware issue and is not on Windows & Linux.
Spectre and Meltdown are.
I'm referencing macOS High Sierra issues. I'm staying on Sierra.
[doublepost=1515438342][/doublepost]
There are many videos on YouTube showing the issues. Final Cut Pro crashes, for example. UI glitches with Finder and more.
Indeed. How dare they.How dare they abandon people with machines more then 8 years old.
The newest Mac I have is from 2009 .
They don't make Macs like they used to which is yet more testament to the through away society in which we live.
The Meltdown fix was actually released back in early December for El Cap, Sierra, and High Sierra. Apple just didn't disclose it was fixed until after the threat was made public.
https://support.apple.com/en-us/HT208331
Search for Meltdown, and you'll find the details there.
Fair enough, I shall search, if there is a comprehensive Youtube video please post a link.
Agreed. Since Apple can't throttle via battery on desktops, this is their way of getting you to buy new hardware.
No, Apple revised the document. The Meltdown patch only applies to 10.13.2.
[doublepost=1515439066][/doublepost]
See my reply to the other response: Apple revised their document and only 10.13.2 is fixed against Meltdown at this time.
Pardon my confusion; your post just made it sound like you thought that Spectre & Meltdown were another High Sierra bug. My mistake.
lmao, you can't be serious.
This video about 3:30 onwards has some good stuff (the stuff prior to 3:30 is about the root bug)
Another example of a graphic glitch:
Seriously, we need an email campaign to Tim demanding to know where support for 10.11 and 10.12 went. Ever since the current piece of trash shipped, most security vulnerabilities remain unpatched. This is a radical reversal from Apple's long-standing policies, and the worst sign yet of Mac abandonment.
Exactly.
Is earlier macOS secure with Safari update alone? If so, I am guessing macOS High Sierra has more system level integration with WebKit.
Not at all. Fixes should be made to support EVERY machine Apple sold that has the exploit. Otherwise, let the lawsuits begin (again).
That's such stupid thinking. Are 7+ year old PCs running Windows performing far better?
Any machine, from any manufacturer, is going to be well overdue for replacement after 7+ years.
Well, yeah. It’s a hardware issue that can be exploited through vulnerabilities exposed in web browsers (unsurprisingly, JavaScript), so they’re mitigating it on the browser end.
“You can’t run around and add a button to these things. They’re already shipped.”
This would potentially go all the way back to the Power Mac x500 computers from 1995.