alt Hacker NewsHere's what apple (themselves) recommends to patch: https://support.apple.com/en-us/149555
Pretty much every developer on mac should probably run their patch.
Replies
That’s not a ‘patch’, it’s several command lines you need to copy and execute, some optionally.
It’s completely insane to me that Apple didn’t script this with interactive prompts as needed, and non-interactive options for automatic installs.
A script to automate this. https://gist.github.com/DavidCWGA/a5d09105371f734ccc7b0693a7...
I reposted this as it wasn't clear from previous comments with this URL that there's a patch that's worth running in there from Apple themselves
First time I've seen AI-authored instructions from Apple. I guess it is hard for them to just post a new .pem because it could be MITM'd.
You have to re-run that every time you do a software update btw
Per https://emudhra.we-have-a-problem.com/apple.html
> macOS 27.2, released on 26th October, did not fix the issue and undid the workaround that users had applied by hand, leaving them vulnerable again.