Top all-time · #1661
intego.com
Company blog · intego.com/mac-security-blogsecurityhardware
intego.com is the company blog at intego.com, writing about security and hardware. Since 2010, 44 different Hacker News readers have linked it 51 times, most often “Apple's Patching Policies Potentially Endanger Users' Security and Privacy”. No feed was found, so read it on the site itself.
Rarely recommended · 3 of 34 sampled comments recommend it?
Why HN links it
HN readers link intego.com's Mac security blog as a source on Mac and iOS malware, vulnerabilities, Apple patching and privacy, mostly cited to back up points in threads.
Summarised by Claude from a sample of 34 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Most-linked posts?
- Apple's Patching Policies Potentially Endanger Users' Security and Privacy4 people · 4 mentions · first linked 2021-11-03
- /mac-security-blog/your-macs-camera-can-be-hacked/2 people · 2 mentions · first linked 2018-08-09
- /mac-security-blog/apples-planned-obsolescence/2 people · 2 mentions · first linked 2022-08-08
- /mac-security-blog/iphone-pin-pass-code/2 people · 2 mentions · first linked 2016-03-04
- I mailed an AirTag and tracked its progress2 people · 2 mentions · first linked 2021-05-11
- Apple still leaving critical vulnerabilities unpatched in macOS Sonoma2 people · 2 mentions · first linked 2024-08-24
What Hacker News says?
Reddit has been used to point to C&C servers in the past[0], so I wouldn't be surprised if some malware does send commands directly via Reddit. [0] https://www.intego.com/mac-security-blog/iworm-botnet-uses-r...
Comment linking /mac-security-blog/iworm-botnet-uses-reddit-as-command-and-control-center/
on “Accidentally Stopping a Global Cyber Attack”Submitted I mailed an AirTag and tracked its progress as a story · 549 points
HN discussion>There's nothing moral about using "silent updates" (updates the user has no opportunity to decide whether to adopt). There's nothing accurate about this description. The user can turn off all update checking, or use the granular permissions to just turn off silent security updates. >To allow macOS to update automatically, go to System Preferences > Software Update, then check Automatically keep my Mac up to date. T…
Comment linking /mac-security-blog/everything-you-need-to-know-about-software-updates/
on “Apple has pushed a silent Mac update to remove hidden Zoom web server”Submitted Apple neglects to patch two zero-day, wild vulnerabilities for Big Sur, Catalina as a story · 175 points
HN discussionI meant the IOS App Store, not the Mac App Store. But this does highlight why Mac App Store app restrictions exist. Re blacklisting, I'm referring to Apple's Xprotect ( https://www.intego.com/mac-security-blog/topic/xprotect/ ).
Comment linking /mac-security-blog/topic/xprotect/
on “How Dropbox Hacks Your Mac”Submitted OS X/Linker: New Mac malware attempts zero-day Gatekeeper bypass as a story · 124 points
HN discussion80% on 10.9 or 10.10: http://www.intego.com/mac-security-blog/os-x-market-share-st... Only 50% on Windows 7 or 8: https://analytics.usa.gov Oh, wait, Windows 7 is from 2009. Only 10% use a Windows younger than two years.
Comment linking /mac-security-blog/os-x-market-share-statistics-1-in-5-macs-still-unsupported/
on “Hidden backdoor API to root privileges in Apple OS X”Submitted Apple's Patching Policies Potentially Endanger Users' Security and Privacy as a story · 44 points
HN discussionhttps://www.intego.com/mac-security-blog/iphone-20-and-ipod-... The first iPod touch had a broadcom chip that supported Bluetooth, but wasn't supported in the software stack. You needed to upgrade to use the Bluetooth hardware that you had already paid for.
Comment linking /mac-security-blog/iphone-20-and-ipod-touch-20-updates-include-a-bakers-dozen-security-fixes/
on “Remote Code Execution on Most Dell Computers”Submitted Apple still leaving critical vulnerabilities unpatched in macOS Sonoma as a story · 5 points
HN discussion>2013: iSeeYou: Disabling the MacBook Webcam Indicator LED https://jscholarship.library.jhu.edu/handle/1774.2/36569 ... applies only to older Mac notebooks from like 2008 period which are long since obsolete according to Apple's announced support policy. >2016: Your Mac’s Camera Can Be Hacked https://www.intego.com/mac-security-blog/your-macs-camera-ca... . ... refers specifically the exploit above. >2016: Former NS…
Comment linking /mac-security-blog/your-macs-camera-ca..
on “Don't close your MacBook with a cover over the camera”Submitted Apple still hasn't fixed 6-year-old "fake headlines" flaw as a story · 4 points
HN discussion> "Designed to protect your privacy, Mac notebooks have a camera indicator light to let you know when the camera is on. ... Published Date: July 02, 2020" Perhaps Apple missed these? 2013: iSeeYou: Disabling the MacBook Webcam Indicator LED https://jscholarship.library.jhu.edu/handle/1774.2/36569 2016: Your Mac’s Camera Can Be Hacked https://www.intego.com/mac-security-blog/your-macs-camera-ca... 2016: Former NSA em…
Comment linking /mac-security-blog/your-macs-camera-can-be-hacked/
on “Don't close your MacBook with a cover over the camera”Submitted Safari Users Line Up to Sue Google for Tracking Web Browsing as a story · 3 points
HN discussionHmm, lots to unpack there, I'll stay focused on my iPhone,...I'm not so sure...the lead article on HN yesterday showed you can track people unrelated to tag's routes, live. https://www.intego.com/mac-security-blog/i-mailed-an-airtag-... I've gathered there's a beep if this is going on for 3 days, but...still not comfy with this. And this isn't a particularly fringe opinion, plenty of comments on the article wonderin…
Comment linking /mac-security-blog/i-mailed-an-airtag-and-tracked-its-progress-heres-what-happened/
on “Emulating AirTags to upload arbitrary data via Apple's FindMy network”Submitted Apple neglects to patch multiple critical vulnerabilities in macOS as a story · 2 points
HN discussionSpotlight suggestions is the issue, and there are settings for both Safari and Spotlight to adjust so searches are not shared. This article shows the steps to disable: http://www.intego.com/mac-security-blog/spotlight-suggestion...
Comment linking /mac-security-blog/spotlight-suggestions-in-os-x-yosemite-and-ios-are-you-staying-private/
on “Windows 10 phones home when you search your start menu, even with Bing disabled”Submitted When does an old iPhone become unsafe to use? as a story · 2 points
HN discussion> while getting security updates Apple releases security updates properly for the current (latest) version only. Older releases get security updates that sometimes don't fix all of the known vulnerabilities. https://www.youtube.com/watch?v=o5KUvgXHOFU https://www.intego.com/mac-security-blog/apple-neglects-to-p...
Comment linking /mac-security-blog/apple-neglects-to-patch-zero-day-wild-vulnerabilities-for-macos-big-sur-catalina/
on “AirPlay and Touch Bar = Network Disaster”Submitted Why iOS 12 Is Huge for Security and Privacy as a story · 2 points
HN discussionI wondered why Safari (running on an older OS X 10.6 system) didn't report the certificate as revoked, although Firefox on the same system did. The answer appears to be as described here: http://www.intego.com/mac-security-blog/protect-safari-from-... After setting the proper options in Keychain Access, Safari reported the revocation correctly.
Comment linking /mac-security-blog/protect-safari-from-fraudulent-digital-certificates/
on “Lavabit SSL Cert Revoked”Submitted Watch Out This Boobytrapped Text Message Will Turn Off Your iPhone as a story · 2 points
HN discussion>These are transient objects for humans passing through their years. A useful novelty, a pleasant experience, that’s all they want. There is huge drive to position the products in this way. Consumers including you are manipulated to think this way for products that traditionally aren't thought of this way. It has become so ingrained that you can't tell the difference. >You cite no evidence. https://9to5mac.com/2021/…
Comment linking /mac-security-blog/apples-planned-obsolescence/
on “Electronics are built with death dates. Let’s not keep them a secret”Submitted New Apple Mac Trojan Called OSX/Crisis Discovered as a story · 2 points
HN discussionSome other things that devs should know about Sequoia: - If you're sticking to Sonoma for stability, be aware Apple doesn't backport all security patches. Apple's release notes show 79 security issues fixed in Sequoia, and only 37 fixed in Sonoma 14.7. Maybe some vulns were only introduced in the Sequoia betas, but based on previous years, that's mostly not the case. Apple only keeps you safe on the latest version.…
Comment linking /mac-security-blog/apple-still-leaving-critical-vulnerabilities-unpatched-in-macos-sonoma/
on “Sublime text started adding a “.s” to new files”Submitted How to run Windows 11 Pro for free on any M1 or M2 Mac as a story · 1 points
HN discussionApple used to be very good at this, especially in the pre-iPhone OS X era. iTunes: https://discussions.apple.com/content/attachment/192853040 Preview: https://www.intego.com/mac-security-blog/wp-content/uploads/... Garage Band: https://inside.wooster.edu/technology/wp-content/uploads/sit...
Comment linking /mac-security-blog/wp-content/uploads/2022/02/preview.png
on “GUIs are built at least 2.5 times”Submitted The Magic Keyboard Turns the iPad into a New Computing Device as a story · 1 points
HN discussionThe concept of HTTPS must sound crazy to you. Edit: Or this guy: https://www.intego.com/mac-security-blog/wp-content/uploads/...
Comment linking /mac-security-blog/wp-content/uploads/2016/03/Browser-Fraudulent-Website-Protection.jpg
on “Notarizing Your Mac Software for macOS Catalina”Submitted New OSX/Crisis or Business Cards Gone Wild as a story · 1 points
HN discussion
