• Re: iOS 16.3 and 15.7.3 out

    From Alan Browne@21:1/5 to All on Mon Jan 23 13:53:54 2023
    On 2023-01-23 13:47, *Hemidactylus* wrote:
    16.3
    https://support.apple.com/en-us/HT213606

    15.7.3
    https://support.apple.com/en-us/HT213598


    ... would be nice if you had added some commentary as to new features
    (if any), bug fixes (if any) and security updates (almost always).

    --
    “Donald Trump and his allies and supporters are a clear and present
    danger to American democracy.”
    - J Michael Luttig - 2022-06-16
    - Former US appellate court judge (R) testifying to the January 6
    committee

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From *Hemidactylus*@21:1/5 to All on Mon Jan 23 18:47:27 2023
    16.3
    https://support.apple.com/en-us/HT213606

    15.7.3
    https://support.apple.com/en-us/HT213598

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From *Hemidactylus*@21:1/5 to Alan Browne on Mon Jan 23 19:36:57 2023
    Alan Browne <bitbucket@blackhole.com> wrote:
    On 2023-01-23 13:47, *Hemidactylus* wrote:
    16.3
    https://support.apple.com/en-us/HT213606

    15.7.3
    https://support.apple.com/en-us/HT213598


    ... would be nice if you had added some commentary as to new features
    (if any), bug fixes (if any) and security updates (almost always).

    Click the links.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Joerg Lorenz@21:1/5 to All on Mon Jan 23 22:32:28 2023
    Am 23.01.23 um 20:36 schrieb *Hemidactylus*:
    Alan Browne <bitbucket@blackhole.com> wrote:
    On 2023-01-23 13:47, *Hemidactylus* wrote:
    16.3
    https://support.apple.com/en-us/HT213606

    15.7.3
    https://support.apple.com/en-us/HT213598


    ... would be nice if you had added some commentary as to new features
    (if any), bug fixes (if any) and security updates (almost always).

    Click the links.

    Nobody needs human gateways to the internet.

    --
    Gutta cavat lapidem (Ovid)

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Alan Browne@21:1/5 to All on Mon Jan 23 16:28:40 2023
    On 2023-01-23 14:36, *Hemidactylus* wrote:
    Alan Browne <bitbucket@blackhole.com> wrote:
    On 2023-01-23 13:47, *Hemidactylus* wrote:
    16.3
    https://support.apple.com/en-us/HT213606

    15.7.3
    https://support.apple.com/en-us/HT213598


    ... would be nice if you had added some commentary as to new features
    (if any), bug fixes (if any) and security updates (almost always).

    Click the links.

    /


    --
    “Donald Trump and his allies and supporters are a clear and present
    danger to American democracy.”
    - J Michael Luttig - 2022-06-16
    - Former US appellate court judge (R) testifying to the January 6
    committee

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Alan Browne@21:1/5 to Joerg Lorenz on Mon Jan 23 16:40:01 2023
    On 2023-01-23 16:32, Joerg Lorenz wrote:
    Am 23.01.23 um 20:36 schrieb *Hemidactylus*:
    Alan Browne <bitbucket@blackhole.com> wrote:
    On 2023-01-23 13:47, *Hemidactylus* wrote:
    16.3
    https://support.apple.com/en-us/HT213606

    15.7.3
    https://support.apple.com/en-us/HT213598


    ... would be nice if you had added some commentary as to new features
    (if any), bug fixes (if any) and security updates (almost always).

    Click the links.

    Nobody needs human gateways to the internet.

    Depends. I always like on-topic, relevant links to things I'm
    interested in.
    But also a little 'narrative' to go with it.

    --
    “Donald Trump and his allies and supporters are a clear and present
    danger to American democracy.”
    - J Michael Luttig - 2022-06-16
    - Former US appellate court judge (R) testifying to the January 6
    committee

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Rod Speed@21:1/5 to Joerg Lorenz on Tue Jan 24 10:02:10 2023
    On Tue, 24 Jan 2023 08:32:28 +1100, Joerg Lorenz <hugybear@gmx.ch> wrote:

    Am 23.01.23 um 20:36 schrieb *Hemidactylus*:
    Alan Browne <bitbucket@blackhole.com> wrote:
    On 2023-01-23 13:47, *Hemidactylus* wrote:
    16.3
    https://support.apple.com/en-us/HT213606

    15.7.3
    https://support.apple.com/en-us/HT213598


    ... would be nice if you had added some commentary as to new features
    (if any), bug fixes (if any) and security updates (almost always).

    Click the links.

    Nobody needs human gateways to the internet.

    I do find it useful to see a notification that an update is available
    rather than waiting for Apple to tell me.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From CDB@21:1/5 to Alan Browne on Mon Jan 23 17:30:20 2023
    On 1/23/2023 4:40 PM, Alan Browne wrote:

    Depends. I always like on-topic, relevant links to things I'm
    interested in.
    But also a little 'narrative' to go with it.

    https://support.apple.com/en-us/HT213606

    It's seriously bad stuff that other people found widely in iOS 16 code
    across the board with a multiple serious kernel holes (very bad stuff).

    AppleMobileFileIntegrity
    CVE-2023-23499: Wojciech Regula of SecuRing (wojciechregula.blog)

    ImageIO
    CVE-2023-23519: Yigit Can YILMAZ

    Kernel
    CVE-2023-23500: Pan ZhenPeng of STAR Labs SG Pte. Ltd.

    Kernel
    CVE-2023-23502: Pan ZhenPeng of STAR Labs SG Pte. Ltd.

    Kernel
    CVE-2023-23504: Adam Doupe of ASU SEFCOM

    Mail Drafts
    CVE-2023-23498: an anonymous researcher

    Maps
    CVE-2023-23503: another anonymous researcher

    Safari
    CVE-2023-23512: Adriatik Raci

    Screen Time
    CVE-2023-23505: Wojciech Regula of SecuRing

    Weather
    CVE-2023-23511: Wojciech Regula of SecuRing & also an anonymous researcher

    WebKit
    CVE-2023-23496: Cheng Gang Wu and others in the Chinese Academy of Sciences

    WebKit
    CVE-2023-23518: Yeong Hyeon Choi and others in Team ApplePIE

    WebKit Bugzilla: 248268
    CVE-2023-23517: YeongHyeon Choi and others in Team ApplePIE

    Additional recognition for finding bugs in Apple's iOS 16 operating system.

    We would like to acknowledge Nick Stenning of Replicate for their
    assistance finding holes in our iOS kernel.

    We would like to acknowledge Baibhav Anand Jha from ReconWithMe and
    Cristian Dinca of Tudor Vianu National High School of Computer Science,
    Romania for their assistance in finding holes in our iOS shortcuts.

    We would like to acknowledge Eliya Stein of Confiant for their assistance
    in finding holes in our WebKit code.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From sms@21:1/5 to All on Mon Jan 23 15:16:38 2023
    On 1/23/2023 11:36 AM, *Hemidactylus* wrote:
    Alan Browne <bitbucket@blackhole.com> wrote:
    On 2023-01-23 13:47, *Hemidactylus* wrote:
    16.3
    https://support.apple.com/en-us/HT213606

    15.7.3
    https://support.apple.com/en-us/HT213598


    ... would be nice if you had added some commentary as to new features
    (if any), bug fixes (if any) and security updates (almost always).

    Click the links.

    Glad that Apple is providing security updates for older devices that are
    not eligible for iOS 16.x.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Joerg Lorenz@21:1/5 to All on Tue Jan 24 03:10:51 2023
    Am 23.01.23 um 23:30 schrieb CDB:
    On 1/23/2023 4:40 PM, Alan Browne wrote:

    Depends. I always like on-topic, relevant links to things I'm
    interested in.
    But also a little 'narrative' to go with it.

    https://support.apple.com/en-us/HT213606

    It's seriously bad stuff that other people found widely in iOS 16 code

    Arlen, you are an asshole.

    --
    Gutta cavat lapidem (Ovid)

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Jolly Roger@21:1/5 to CDB on Tue Jan 24 02:02:08 2023
    On 2023-01-23, CDB <bellemarecd@gmail.com> wrote:
    On 1/23/2023 4:40 PM, Alan Browne wrote:

    Depends. I always like on-topic, relevant links to things I'm
    interested in. But also a little 'narrative' to go with it.

    https://support.apple.com/en-us/HT213606

    It's seriously bad stuff

    "Apple closing security vulnerabilities, is BAD, M'KAY?"

    --
    E-mail sent to this address may be devoured by my ravenous SPAM filter.
    I often ignore posts from Google. Use a real news client instead.

    JR

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Jolly Roger@21:1/5 to Alan Browne on Tue Jan 24 01:54:03 2023
    On 2023-01-23, Alan Browne <bitbucket@blackhole.com> wrote:
    On 2023-01-23 13:47, *Hemidactylus* wrote:
    16.3
    https://support.apple.com/en-us/HT213606

    15.7.3
    https://support.apple.com/en-us/HT213598

    ... would be nice if you had added some commentary as to new features
    (if any), bug fixes (if any) and security updates (almost always).

    Agreed, but it's not like a quick web search for "about ios 16 updates"
    doesn't lead you straight to Apple's official release notes. Minor inconvenience, really.

    --
    E-mail sent to this address may be devoured by my ravenous SPAM filter.
    I often ignore posts from Google. Use a real news client instead.

    JR

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Hank Rogers@21:1/5 to Alan Browne on Mon Jan 23 19:30:37 2023
    Alan Browne wrote:
    On 2023-01-23 16:32, Joerg Lorenz wrote:
    Am 23.01.23 um 20:36 schrieb *Hemidactylus*:
    Alan Browne <bitbucket@blackhole.com> wrote:
    On 2023-01-23 13:47, *Hemidactylus* wrote:
    16.3
    https://support.apple.com/en-us/HT213606

    15.7.3
    https://support.apple.com/en-us/HT213598


    ... would be nice if you had added some commentary as to new
    features
    (if any), bug fixes (if any) and security updates (almost always).

    Click the links.

    Nobody needs human gateways to the internet.

    Depends. I always like on-topic, relevant links to things I'm
    interested in.
    But also a little 'narrative' to go with it.


    It can be useful, and certainly isn't harmful. But as you say,
    better with a few comments.

    You just cannot please Jughead Lorenz.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Rod Speed@21:1/5 to Joerg Lorenz on Tue Jan 24 13:46:58 2023
    On Tue, 24 Jan 2023 13:10:51 +1100, Joerg Lorenz <hugybear@gmx.ch> wrote:

    Am 23.01.23 um 23:30 schrieb CDB:
    On 1/23/2023 4:40 PM, Alan Browne wrote:

    Depends. I always like on-topic, relevant links to things I'm
    interested in.
    But also a little 'narrative' to go with it.

    https://support.apple.com/en-us/HT213606

    It's seriously bad stuff that other people found widely in iOS 16 code

    Arlen, you are an asshole.

    That's not Arlen either.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Rod Speed@21:1/5 to All on Tue Jan 24 14:30:16 2023
    On Tue, 24 Jan 2023 14:17:10 +1100, Hank Rogers <hank@nospam.invalid>
    wrote:

    Rod Speed wrote:
    On Tue, 24 Jan 2023 13:10:51 +1100, Joerg Lorenz <hugybear@gmx.ch>
    wrote:

    Am 23.01.23 um 23:30 schrieb CDB:
    On 1/23/2023 4:40 PM, Alan Browne wrote:

    Depends. I always like on-topic, relevant links to things I'm
    interested in.
    But also a little 'narrative' to go with it.

    https://support.apple.com/en-us/HT213606

    It's seriously bad stuff that other people found widely in iOS 16 code

    Arlen, you are an asshole.
    That's not Arlen either.

    Hahahaha. Jughead thinks &everyone is arlen!

    Everyone he doesn't agree with, anyway.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Hank Rogers@21:1/5 to Rod Speed on Mon Jan 23 21:17:10 2023
    Rod Speed wrote:
    On Tue, 24 Jan 2023 13:10:51 +1100, Joerg Lorenz <hugybear@gmx.ch>
    wrote:

    Am 23.01.23 um 23:30 schrieb CDB:
    On 1/23/2023 4:40 PM, Alan Browne wrote:

    Depends. I always like on-topic, relevant links to things I'm
    interested in.
    But also a little 'narrative' to go with it.

    https://support.apple.com/en-us/HT213606

    It's seriously bad stuff that other people found widely in iOS
    16 code

    Arlen, you are an asshole.

    That's not Arlen either.

    Hahahaha. Jughead thinks &everyone is arlen!

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From CDB@21:1/5 to Jolly Roger on Mon Jan 23 23:42:02 2023
    On 1/24/2023 2:02 AM, Jolly Roger wrote:

    "Apple closing security vulnerabilities, is BAD

    I said the vulnerabilities were bad.
    Very bad.

    I didn't say Apple was bad for fixing them.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Jolly Roger@21:1/5 to CDB on Tue Jan 24 06:13:25 2023
    On 2023-01-24, CDB <bellemarecd@gmail.com> wrote:
    On 1/24/2023 2:02 AM, Jolly Roger wrote:

    "Apple closing security vulnerabilities, is BAD

    I said the vulnerabilities were bad.

    Your categorization is bad. Bullshit bad.

    --
    E-mail sent to this address may be devoured by my ravenous SPAM filter.
    I often ignore posts from Google. Use a real news client instead.

    JR

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Alan Browne@21:1/5 to Jolly Roger on Tue Jan 24 08:34:22 2023
    On 2023-01-23 20:54, Jolly Roger wrote:
    On 2023-01-23, Alan Browne <bitbucket@blackhole.com> wrote:
    On 2023-01-23 13:47, *Hemidactylus* wrote:
    16.3
    https://support.apple.com/en-us/HT213606

    15.7.3
    https://support.apple.com/en-us/HT213598

    ... would be nice if you had added some commentary as to new features
    (if any), bug fixes (if any) and security updates (almost always).

    Agreed, but it's not like a quick web search for "about ios 16 updates" doesn't lead you straight to Apple's official release notes. Minor inconvenience, really.

    I'm lazy I guess.


    --
    “Donald Trump and his allies and supporters are a clear and present
    danger to American democracy.”
    - J Michael Luttig - 2022-06-16
    - Former US appellate court judge (R) testifying to the January 6
    committee

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From mike@21:1/5 to sms on Tue Jan 24 20:10:03 2023
    On 1/24/2023 12:16 AM, sms wrote:

    16.3
    https://support.apple.com/en-us/HT213606

    15.7.3
    https://support.apple.com/en-us/HT213598


    ... would be nice if you had added some commentary as to new features
    (if any), bug fixes (if any) and security updates (almost always).

    Click the links.

    Glad that Apple is providing security updates for older devices that are
    not eligible for iOS 16.x.

    Are you sure about that?

    What then do you think of this Apple new mmclarification of release policy? https://hothardware.com/news/apple-admits-only-fully-patches-security-flaws-in-latest-os-releases

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From sms@21:1/5 to sms on Tue Jan 24 07:18:12 2023
    On 1/23/2023 3:16 PM, sms wrote:

    <snip>

    Glad that Apple is providing security updates for older devices that are
    not eligible for iOS 16.x.

    BTW, Apple has not yet announced an end of security updates for devices
    running iOS 15.x that cannot run iOS 16.x.

    In the past, Apple provided security updates to the iPhone 6 and 5s for
    nearly three years after they stopped providing full iOS version updates
    for those devices. Based on history, the 6s/6s Plus and 7/7 Plus should
    be able to get security updates until sometime in 2025.

    Apple also explicitly states that the security updates to older versions
    of iOS may not provide the same level of security as updates and
    upgrades that are available on newer devices.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From mike@21:1/5 to scharf.steven@geemail.com on Tue Jan 24 21:59:09 2023
    On 24-01-2023 15:18 sms <scharf.steven@geemail.com> wrote:

    BTW, Apple has not yet announced an end of security updates for devices running iOS 15.x that cannot run iOS 16.x.

    You're wrong because you don't understand how Apple updates iOS & macOS.

    Read this please before you make increasingly wrong statements. https://support.apple.com/guide/deployment/about-software-updates-depc4c80847a

    In the past, Apple provided security updates to the iPhone 6 and 5s for nearly three years after they stopped providing full iOS version updates
    for those devices. Based on history, the 6s/6s Plus and 7/7 Plus should
    be able to get security updates until sometime in 2025.

    Fixing one (usually very serious) bug in a much older release than which is fully supported happens frequently in all operating systems all the time.

    What you need to educate yourself on is that you think that fixing one bug means Apple fixed every bug that Apple knows about in the operating system.

    Apple also explicitly states that the security updates to older versions
    of iOS may not provide the same level of security as updates and
    upgrades that are available on newer devices.

    The "may" is the critical word - read this to educate yourself please. https://hothardware.com/news/apple-admits-only-fully-patches-security-flaws-in-latest-os-releases

    Stop spouting off when you don't have any clue how Apple updates OSs.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From NewsKrawler@21:1/5 to Alan Browne on Tue Jan 24 23:33:33 2023
    On 2023-01-24, Alan Browne <bitbucket@blackhole.com> wrote:

    ... would be nice if you had added some commentary as to new features
    (if any), bug fixes (if any) and security updates (almost always).

    Agreed, but it's not like a quick web search for "about ios 16 updates"
    doesn't lead you straight to Apple's official release notes. Minor
    inconvenience, really.

    I'm lazy I guess.

    The release contains numerous fixes for a variety of extremely serious
    actively exploited bugs which made almost all iOS devices wide open.

    But the last paragraph of this link shows it wasn't only those bug fixes. https://thehackernews.com/2023/01/apple-issues-updates-for-older-devices.html

    It's not all bug fixes, though. The updates also bring with them the
    ability to use hardware security keys to lock down Apple IDs for phishing-resistant two-factor authentication. They also expand the
    availability of Advanced Data Protection outside of the U.S.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)