move-on-by 6 hours ago | next |

> “As a developer of macOS security tools, it’s incredibly frustrating to time and time again have to deal with (understandably) upset users (understandably) blaming your tools for breaking their Macs, when in reality it was Apple’s fault all along,”

I would like to understand this better. Were there not any beta releases that these companies could have tested with in advance? Or were changes made between the beta and the release that broke things? Or something else?

sephamorr 3 hours ago | root | parent | next |

Per Patrick Wardle, this was well reported to Apple during beta.

https://x.com/patrickwardle/status/1836862900654461270

move-on-by 2 hours ago | root | parent |

Thank you, this makes the frustration in the above quote more understandable. For anyone wanting to avoid the x click:

> Worth stressing this was reported to Apple before the GA was released (by multiple people, to multiple teams/orgs within Apple) so Apple 100% knew about this, and shipped macOS 15 anyways

Spivak 5 hours ago | root | parent | prev |

This is the part I'm missing too. Major versions are the time to ship braking changes, did none of these companies bother to test their software that mucks deep in the plumbing of the OS?

RockRobotRock 5 hours ago | root | parent | prev |

Is there even an equivalent to WSUS on macOS that lets admins block an update until it's tested?

wpm 2 hours ago | root | parent | next |

There is a configuration profile payload that can stop updates like major version changes for up to 90 days. You cannot stop them indefinitely from appearing in Software Update.

salmo 5 hours ago | root | parent | prev | next |

Yeah. There’s Jamf and similar tools. Companies often block major updates until their 100 agents all officially support it. Oh, and do cool things like not letting you change your background or whatever random settings some admin decides are good.

ripa 2 hours ago | root | parent |

Yep, a lot of these policies seem to come from some random person scrolling through a list of supported options and arbitrarily making up values that are enforced on people.

One of our policies enforce that screen savers must start after 20 minutes, and it’s not possible to reduce it (I have my personal on 3 minutes). Or the fact that it will constantly reset the UI notification volume to 100% and speaker output, even though have headphones almost always.

Infuriating.

colechristensen 2 hours ago | root | parent | prev |

Yes, it's called MDM (Mobile Device Management) and lets admins set all kinds of policy on apple devices. There are several vendors out there that implement it.

musicale 19 minutes ago | prev | next |

> And, somehow, the software update has broken the functionality of several security tools made by CrowdStrike, ...

What terrible news – whatever shall we do?