Rocksolid Light

Welcome to novaBBS (click a section below)

mail  files  register  newsreader  groups  login

Message-ID:  

The memory management on the PowerPC can be used to frighten small children. -- Linus Torvalds


computers / comp.mobile.ipad / Re: Arlen's description of UPDATES, UPGRADES & RAPID SECURITY RESPONSE releases is pure gibberish

SubjectAuthor
* Apple's description of UPDATES, UPGRADES & RAPID SECURITY RESPONSE releasesScratch
+- Re: Apple's description of UPDATES, UPGRADES & RAPID SECURITYAlan
`- Re: Arlen's description of UPDATES, UPGRADES & RAPID SECURITYBob Campbell

1
Apple's description of UPDATES, UPGRADES & RAPID SECURITY RESPONSE releases

<u8ut1d$280n5$1@paganini.bofh.team>

  copy mid

https://www.novabbs.com/computers/article-flat.php?id=2378&group=comp.mobile.ipad#2378

  copy link   Newsgroups: misc.phone.mobile.iphone comp.mobile.ipad comp.sys.mac.system
Path: i2pn2.org!i2pn.org!paganini.bofh.team!not-for-mail
From: scratchn...@tornado.net (Scratch)
Newsgroups: misc.phone.mobile.iphone,comp.mobile.ipad,comp.sys.mac.system
Subject: Apple's description of UPDATES, UPGRADES & RAPID SECURITY RESPONSE releases
Date: Sat, 15 Jul 2023 21:46:33 +0200
Organization: To protect and to server
Message-ID: <u8ut1d$280n5$1@paganini.bofh.team>
Mime-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit
Injection-Date: Sat, 15 Jul 2023 19:45:51 -0000 (UTC)
Injection-Info: paganini.bofh.team; logging-data="2360037"; posting-host="7C7rnsK8shZwy9RG5z57Aw.user.paganini.bofh.team"; mail-complaints-to="usenet@bofh.team"; posting-account="9dIQLXBM7WM9KzA+yjdR4A";
Cancel-Lock: sha256:v4jZAzgYBdLvwjvGZmSm7mPjB1deIAifj1I8gZevhkk=
X-Notice: Filtered by postfilter v. 0.9.3
 by: Scratch - Sat, 15 Jul 2023 19:46 UTC

Apple's description of UPDATES, UPGRADES & RAPID SECURITY RESPONSE releases

Once you understand what a release entails, you'll realize the truth.
Apple's full release support is (by far!) the shortest in the industry.

https://screenrant.com/apple-product-security-update-lifespan/
"The support document notes that only the latest releases provide full
protection from security vulnerabilities. "Because of dependency on
architecture and system changes to any current version of macOS (for
example, macOS 13), not all known security issues are addressed in previous
versions (for example, macOS 12)," the Apple document says. Essentially,
this means that the security updates Apple issues to older operating system
versions are not fully protected. Using that logic, the iOS 15.7.1 update
may leave security vulnerabilities unaddressed that have been patched in
the iOS 16.1 updates. This means that although Apple issues security
updates to older operating systems, users should only expect their devices
to be secure during the typical five to six-year software upgrade support
window."

https://hothardware.com/news/apple-admits-only-fully-patches-security-flaws-in-latest-os-releases
"Old versions of operating systems of Apple devices do not get complete
security patches. The emphasis in the document is that there is a
difference between Upgrade and Update, at least in the Apple lexicon."

https://arstechnica.com/gadgets/2022/10/apple-clarifies-security-update-policy-only-the-latest-oses-are-fully-patched/
"Despite providing security updates for multiple versions of macOS and iOS
at any given time, Apple says that only devices running the most recent
major operating system versions should expect to be fully protected.
Throughout the document, Apple uses "upgrade" to refer to major OS releases
that can add big new features and user interface changes and "update" to
refer to smaller but more frequently released patches that mostly fix bugs
and address security problems (though these can occasionally enable minor
feature additions or improvements as well). So updating from iOS 15 to iOS
16 or macOS 12 to macOS 13 is an upgrade. Updating from iOS 16.0 to 16.1 or
macOS 12.5 to 12.6 or 12.6.1 is an update. In other words, while Apple will
provide security-related updates for older versions of its operating
systems, only the most recent upgrades will receive updates for every
security problem Apple knows about."

Note that a release is more than a kernel.
A lot more.

Most people who "think" Apple releases are supported longer than, oh, say,
Windows or Android, are wrong because they don't understand how Windows and
Android releases their software. Mainly, neither is a monoslab like Apple.

Windows is supported for so many years, the machine will fall apart before
the support ends, and even then you get a free upgrade to the next version.

So is Android, although the support varies for Android from a mere five
years to much longer than that for the underlying components (which is why
the Apple people can't understand that Android is supported for over 10
years due to the fact that the _components_ are supported for that long).

The problem is Apple-only owners don't understand what a "release" entails.
It's not just the kernel. It's more than that. A _lot_ more than that.

Only was iOS a monoslab. No other operating system. Only iOS.

As a direct result of that monoslab, iOS is ten times more exploited.
https://www.cisa.gov/known-exploited-vulnerabilities-catalog

But things are improving for chipping away at the Apple monoslab.

While Apple's iOS is _still_ mostly a monoslab (e.g., the messenger is a
key component integral with the monoslab only on iOS - and no other OS),
the new-to-iOS-16 abiltity for a "Rapid Security Response" is good news!

UPDATE monoslab vs UPGRADE monoslab vs RAPID SECURITY RESPONSE patch:
https://support.apple.com/guide/deployment/about-software-updates-depc4c80847a/

RSR patches:
https://support.apple.com/en-us/HT201224

UPGRADES:
https://support.apple.com/en-us/HT201222

Note that there is more to a release than just the bugfixes (e.g., Android
is updated every day over the Google Play Services update mechanisms), but
the bugfixes are important to be rolled out as soon as they possibly can.

Windows runs those bufixes every "patch tuesday" for example, not waiting
for a monoslab to be created (which would take three to six months to do).

Hence, I congratulate Apple for joining the rest of the world in adding
this new ability to reduce the monolithic slab a tiny bit, with the RSRs.

RSR: (only available in iOS 16 which is no longer a single monolithic slab)
RSR: (Only available in macOS 13 which never really was a single monoslab).

Apple's description of UPDATES, UPGRADES & RAPID SECURITY RESPONSE releases

Re: Apple's description of UPDATES, UPGRADES & RAPID SECURITY RESPONSE releases

<u8uub1$flgq$1@dont-email.me>

  copy mid

https://www.novabbs.com/computers/article-flat.php?id=2379&group=comp.mobile.ipad#2379

  copy link   Newsgroups: misc.phone.mobile.iphone comp.mobile.ipad comp.sys.mac.system
Path: i2pn2.org!i2pn.org!eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: nuh...@nope.com (Alan)
Newsgroups: misc.phone.mobile.iphone,comp.mobile.ipad,comp.sys.mac.system
Subject: Re: Apple's description of UPDATES, UPGRADES & RAPID SECURITY
RESPONSE releases
Date: Sat, 15 Jul 2023 13:08:00 -0700
Organization: A noiseless patient Spider
Lines: 11
Message-ID: <u8uub1$flgq$1@dont-email.me>
References: <u8ut1d$280n5$1@paganini.bofh.team>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Injection-Date: Sat, 15 Jul 2023 20:08:01 -0000 (UTC)
Injection-Info: dont-email.me; posting-host="a43b4fbb32b4e93deae3979434b63625";
logging-data="513562"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1+YoIHrqBLLSfiEiD+vhJ+MRxm+4ED1rS4="
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:102.0)
Gecko/20100101 Thunderbird/102.13.0
Cancel-Lock: sha1:Us5cawtEFZxxxXjr47nAdiC7bYo=
Content-Language: en-CA
In-Reply-To: <u8ut1d$280n5$1@paganini.bofh.team>
 by: Alan - Sat, 15 Jul 2023 20:08 UTC

On 2023-07-15 12:46, Scratch wrote:
> Apple's description of UPDATES, UPGRADES & RAPID SECURITY RESPONSE releases
>
> Once you understand...

....that this is just your latest posting nym, Arlen?

Yes: I'll understand that one should ignore it.

:-)

Re: Arlen's description of UPDATES, UPGRADES & RAPID SECURITY RESPONSE releases is pure gibberish

<ULydnYGZxflk3C75nZ2dnZfqnPSdnZ2d@supernews.com>

  copy mid

https://www.novabbs.com/computers/article-flat.php?id=2382&group=comp.mobile.ipad#2382

  copy link   Newsgroups: misc.phone.mobile.iphone comp.mobile.ipad comp.sys.mac.system
Path: i2pn2.org!i2pn.org!weretis.net!feeder6.news.weretis.net!news.misty.com!border-2.nntp.ord.giganews.com!nntp.giganews.com!Xl.tags.giganews.com!local-1.nntp.ord.giganews.com!nntp.supernews.com!news.supernews.com.POSTED!not-for-mail
NNTP-Posting-Date: Sun, 16 Jul 2023 01:03:53 +0000
Date: Sat, 15 Jul 2023 21:03:53 -0400
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:102.0)
Gecko/20100101 Thunderbird/102.13.0
Subject: Re: Arlen's description of UPDATES, UPGRADES & RAPID SECURITY
RESPONSE releases is pure gibberish
Newsgroups: misc.phone.mobile.iphone,comp.mobile.ipad,comp.sys.mac.system
References: <u8ut1d$280n5$1@paganini.bofh.team>
Content-Language: en-US
From: non...@none.none (Bob Campbell)
In-Reply-To: <u8ut1d$280n5$1@paganini.bofh.team>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Message-ID: <ULydnYGZxflk3C75nZ2dnZfqnPSdnZ2d@supernews.com>
Lines: 7
X-Trace: sv3-bpQMCfvRpIQrCmqN47C7qqbHzM58nCa1xIT4+YJtJSZYLPC6w1PMsh4kIShu4fS3r/7h0zchjRjFClR!tCzSgfO6fmo1/A1Z2cN/yQ289RVpDHDU8RyRkpwumtAYV3y+ztZr17ieG65D+qJ0F5PS1xqLFqYu!nA2BYwRplg==
X-Complaints-To: www.supernews.com/docs/abuse.html
X-DMCA-Complaints-To: www.supernews.com/docs/dmca.html
X-Abuse-and-DMCA-Info: Please be sure to forward a copy of ALL headers
X-Abuse-and-DMCA-Info: Otherwise we will be unable to process your complaint properly
X-Postfilter: 1.3.40
 by: Bob Campbell - Sun, 16 Jul 2023 01:03 UTC

No UNIX OS is a "monoslab". AGAIN, you have no clue what you are
babbling about.

Give a rest, Arlen.

1
server_pubkey.txt

rocksolid light 0.9.8
clearnet tor