Juli Clover, MacRumors:
> macOS High Sierra, released to the public today, could be impacted by a major security flaw that could allow a hacker to steal the usernames and passwords of accounts stored in Keychain.
Here’s the tweet that brought this to light:
The timing of this reveal is terrible, as it coincides with the release of macOS High Sierra. I know a number of people who have held off updating for just this reason.
Don’t let this story stop you from updating:
1. This exploit is said to effect earlier versions of macOS as well. If you are on Sierra and considering updating, you are already as vulnerable as you would be if you updated.
2. Apple is said to be working on a fix and Patrick Wardle has said he will not release details of the exploit until the fix patch is available.
Add to that:
> For this vulnerability to work, a user needs to download malicious third-party code from an unknown source, something Apple actively discourages with warnings about apps downloaded outside of the Mac App Store or from non-trusted developers.
To be clear, do your research and a full backup before you update. I’ve done my homework and, once I finish this morning’s Loop posts, will hit the return key and start my update. I will definitely update on Twitter as I go. Hopefully, the update will be trouble-free. Fingers are crossed.
I’ve done the update on one of my computers and it’s totally fine so far. The new file system seems to happen automagically which is great (I thought I might have to reformat my internal SSD and do a clean install).
Many folks don’t seem to realize that a big update like this pushes Spotlight to reindex the SSD/HD and that usually gets the machine hot and the fans running. That doesn’t last all that long and when it’s done, it’s done and things quiet down.
I’ll probably do the update on my main machine later today or tomorrow. It really does seem totally stable.
While YMMV, I’ve found High Sierra while indexing to be faster than Sierra when not indexing. This is a huge improvement.
My Mac Pro isn’t doing as well as my MacBook Pro, the mouse is tracking oddly, like the machine is grinding away in the background doing something. Tomorrow I’ll be concerned, not yet.
Sounds like a Restart might be called for before concern, too. Shouldn’t need it, but this is a more practical world than that. 🙂
I’ve done a few, thanks.
I found one problem: somehow the installer checked a mouse accessibility feature that helps one locate the cursor by making it grow as you move the mouse faster. I’ve never used that and somehow it turned itself on. There may be more of that. Ugh.