Arbortheus

I was being facetious, it’s a terrible idea on multiple levels.

OpenClaw agents continuously scanning your prod infrastructure and applying config tweaks and package updates autonomously on the fly in response to viral CVE numbers trending on X.

This reads to me that nothing has happened and they are just trying to patch stuff? Right?

Apple’s handling of this has been a disgrace. It took 4 days before my iPhone and MacBook Pro got the CRL, and now I hear they have done this. Dreadful.

Apple, for the company that prizes itself on believing privacy is a human right, why are you failing your customers so badly on PKI management?

I expect there’s still a lot of people that haven’t upgraded yet.

A touch screen MacBook is a mistake.

If the people that do stuff well fail, what does that leave us with?

Hmm, on my MacBook Pro M4 Max I'd only tested on Chrome (which was fine).

I just tried on Safari, it still trusted 2/14 compromised chains.

Rubbish.

To be honest, this whole experience has left me with a very sour taste in my mouth. It feels to me that the whole CA industry needs reform.

I am not smart enough to say how, but the sheer amount of work this created across the industry is monstrous. It probably has cost $billions to mitigate, and those mitigations have been slow and ineffective (see: my iPhone still being vulnerable).

In my experience, seemingly random pieces of software, libraries, and programming languages packaging their own CA stores has made this much harder to mitigate than simply running 'apt-get update ca-certificates'. We've practically just had to update every single thing to mitigate this.

For me I had to go back to the feedback assistant home page, refresh (swipe down), then it showed up under 'Recent activity'.

Done, it's FB25286974 if anyone from Apple is reading.

Perhaps there's some bugginess, or it's a "staged rollout", however isn't the point of such a system to be rapid?

... 5 days later and I know better than to do online banking or messaging on my iPhone 15.

It must be broken/buggy then.

No battery saving for me.