How does Apple get away with this UI?
twitter.com
twitter.com
My PB is supplied by my employer, so I'm using it all the time in the daytime. Sometimes I have time to do the update, but sometimes I don't - but I might anticipate that I can come to a stopping point in an hour or two. But I don't get that option. If I say "wait an hour" - it will just start the update in an hour - killing my browser and tabs, my IDE, my terminal sessions, whatever else I have open...
Hosed isn't the right word for it - fortunately IntelliJ allows me to continue where I left off, and getting my tabs back is no problem in most browsers. Terminal sessions are jacked, though. And just getting back to where you were mindset-wise - that's a major pain (it's one thing when it's on your terms, but when the rug is yanked out from under you, it becomes a real problem).
Ubuntu (and probably other Debian-based Linux systems - and maybe all of them - so many distros I haven't tried or haven't played with in a long while - sigh) does it right - if you say to try again later, it will pop up the same dialog later. Most security updates aren't of the nature that waiting an hour or a day is going to be a major issue (and if it were, we generally are informed well ahead of time of it).
So - I can understand and feel everyone's pain on this; Apple really should change this to allow user choice. Heck - I'd also love options to install "at next shutdown", "at next powerup", and "at a set time/day" - because at the end of the day, when I shutdown my machine, that would actually be the best time to do the install/update (for me at least).
Interestingly, I protect against this by running iTerm, which asks me before quitting and prevents the shutdown.
Tmux might be useful for that.
But still, this is pretty bad on Apple's part.
Debian yes. But Ubuntu has adopted a Windows 10-style approach with its new snap packaging format. See https://forum.snapcraft.io/t/disabling-automatic-refresh-for...
(1) I saw examples of how to phrase comments in order to keep a conversation polite and constructive, even as tempers start to rise.
(2) I learned a lot about how Ubuntu "snap" installations work, and why "apt" better fits with my ideals.
I appreciate you bringing this up. It happened to me a few times, and I was wondering if I was going crazy, or if it had really just lied to me like that. Glad to know I'm not crazy.
Tmux may help you here.
Not that this excuses Apple's dark pattern UI or absolves them of any responsibility for fucking up your environment. I'm just trying to reduce your pain slightly.
I'm waiting for 10.15.2 (which thankfully, appears to be right around the corner).
Edit: 10.15.2 appears to be available as of this moment. Though release notes don't appear to be up yet(?)
sudo softwareupdate --ignore "macOS Catalina" Ignored updates:
(
"macOS Catalina"
)
the thread is a godsend for that piece of advice.I haven't updated to Catalina (and won't for some time yet, due to institutional restrictions and legacy 32-bit software), but aside from the badge on the System Preferences dock icon, I only get the "you have updates" notification when there is an update available for the OS version I'm currently running.
I do have to click on the "other updates" not-a-button button in the Software Update pane to see what's actually available and apply it, though, so it isn't entirely obvious that there's something besides Catalina to install.
(I'm also not entirely certain that there isn't some kind of institutional setting that's affecting this, or just weirdness on my end—I'm not trying to say my experience is universal, just saying there might be another explanation.)
There, you'll find that while the most prominent option is to upgrade to Catalina, there's a teeny tiny link to install other updates, which is where you can (and should) get critical updates for macOS Mojave.
https://support.apple.com/en-us/HT210788
Today's Dec 10 update addresses a kernel vulnerability, CVE-2019-8847. All users should get this update, but click carefully to make sure you don't accidentally try to upgrade to Catalina.
The UI is clear. The notification is clear. Catalina only will install if you specifically ask it to install. Notifications for Catalina are distinct from Software Upgrades (they are two different notifications).
I do not understand people who assume the worst without even seeing it for themselves. Some people just want a bit of drama in their life.
After having been pestered about Catalina for quite some time, obviously my response is to close the window without looking further. If it weren't for the current discussion thread, I would still not know about this security update. This is why I called it hindering users.
(Not sure how your final comment applies here.)
Mac is pretty much dead as a every day user platform. For the rest of us we dont need 12 months macOS release. Apple just give yourself time to do it properly.
"Restart Now" and "Ok"
Guess what "Ok" did? Restarted the fucking machine, but _not_ right away... no, it waited about ten minutes before randomly performing the update during a game I was playing.
- [ ] Fix FaceTime audio ducking BS
- [ ] Add screen sharing to FaceTime
- [ ] VP9 decoder in Safari
- [ ] Make Puck.app part of macOS
- [ ] Make iMessage search actually useful
- [ ] Tree style tabs (like that FF extension)
- [ ] Safari profiles
- [ ] A protocol to link profiles (tab A in iTerm opens links in profile A, emails from email account B opens links in profile B)
- [ ] Improve Preview reliability
- [ ] Make screenshots save faster
- [ ] Something to announce that my charger is plugged but not charging (happens once a week - you realise you've got 2% battery left when everything slows down massively)
- [ ] Something to stop Mail opening main window when there's some letters already open (aka behave like every other mac app)
- [ ] Zoom on email when composing
- [ ] Solve Mail app performance (3k of emails shouldn't take 5 seconds to render on i9)
- [ ] Spell checker is pretty bad
- [ ] Reliable way to disable dedicated GPU (and a 15" MBP model without it - most devs don't need it, but I understand devs aren't target market anyway)
- [ ] This checklist was made with Notes app, which I starting to love, but pasting this list back doesn't parse as a checklist
- [ ] Unsure if it's macOS or iOS bug, but it's been like that for years - storing Mom or Dad in contacts get's converted into Mom Lastname or Dad Lastname. Trying to use Siri "Call Dad" results in "I can't find a number for 'Dad Lastname' in your contacts, would you like to search instead?".
- [ ] Contacts adds invisible characters when copy/pasting phone numbers
- [ ] Can't change audio input without disconnecting bluetooth speaker (while on FaceTime)
- [ ] Siri Announce can't tell apart english messages from non-english so it just reads out this madness
- [ ] 2 letters missing from keyboard in my language (confirmed "working as intended" by Apple)
- [ ] Can't share iCloud data with family who lives in different country
* When rebooting after an update, Chrome tabs will begin auto-playing YouTube videos around ten seconds before I enter my password to log in.
* Number of unread items != number shown next to “Unread” in Mail.app != number shown in red dot over Mail.app icon
* Step count and distance reported by Activity.app != values reported by Health.app
* Reminders.app does not in fact remind me of anything, ever
* Unable to have multiple simultaneous timers running in Clock.app, unlike Android equivalent
* Un-deleteable duplicate entries in Calendar.app
* Maps.app keeps reverting to driving instructions (I don’t own a car)
* If I am listening to my phone or tablet through Bluetooth headphones, and an alarm goes off, the alarm first silences the headphones and then comes out of the phone or tablet instead
Some are macOS issues, others are iOS, but they’re all problems.
The App Store alone is a great show case. You have:
* upper right "Done"(Image)
* upper left "X", hidden (Fullscreen Video)
* upper left small arrow or "<Name" (App Detail page not on Frontpage)
* outside Panel (Only for Frontpage lists/articles, it uses a completely gratuitous modal - the surroundings become black and there's no state to speak of)
* upper left arrow or Back inside Panel (App Detail page, which also opens inside the modal when coming from a list/article on Frontpage. careful not to tap outside, or the whole modal closes. I'm quite certain there's an entry in the Apple HIG to not use modals this way...)
* and of course the tiny, almost shameful status bar back arrow when a tap opens another app (say, pdf or browser)
(I somehow got the feeling I even missed one, ah yes - I think there was a modal you had to close with the x)
C'mon Apple, get it together and implement a consistent navigation stack. We're in the Browser Age now. (And hey, you've already stopped being shy about borrowing from Android. So, go for it! Great Artists Steal! :) )
And here's the thing... this is good UI, because...
Like herd immunity, I want everyone to be installing security updates as soon as convenient to prevent malware from spreading. What is shown are exactly what the easy, default options should be. But if you're an informed consumer and have specific reasons to disable updates, then "Advanced..." is exactly the place to put it.
PS4 is also laughably bad at this. It's been sitting there, plugged in and connected to internet for 6 months, in rest mode and not completely powered off. But it'll wait until I finally try to play a game to force me to download and install 50GB of updates right then.
Yes, that way you can wake up with a 20% battery. Just enough to power it on and get all kinds of warnings about how there's not enough power left to run things.
My PS4. No freaking clue why it misses an update from a week ago.
Well what the hell were you doing all day long then you stupid box?
Of course, if you like to watch TV late at night, it’s a problem, but I bet they did the numbers on that internally before people called angry because their PPV movie went away.
My most recent encounter is pretty much anything to do with Apple Pay (especially on the mac). I couldn't get any transactions to complete. Ended up being that my address didn't validate (apparently) because it was 'too long' -- good luck figuring that out via the (horrific) Apple Pay address form edit UI ...
The handy "google pay" button just sent me on a loop to fix my address, I did, it accepted, then rejected on pay as there was "an issue with my address" - tried 3 times before just nuking my address, re-entering it (I swear the same details) and then it was accepted. Maybe random co-incidence, or maybe common card back-end was having a wobble.
Ultimately found a work-around by going to the accounts website and adding the new card from a family plan member (which didn't require the last digits of the old on the main account holder's account) and then cahnging the default and deleting the old. But it wasn't documented anywhere.
I work with a lot of Mac users and just watching them trying to manage application windows is painful. Ever since they replaced maximize with full-screen - whenever someone wants to click near the top of the window, I make a bet with myself whether they're going to miss the mark and cause the menubar to drop down or not.
> sudo softwareupdate --ignore "macOS Catalina"
This turns off MacOS upgrade notifications, instead of turning off all notifications.
> sudo softwareupdate --ignore "macOS Catalina"
It uses the label in the software update catalog to filter out specific updates.
You can get rid of it with:
> sudo softwareupdate --reset-ignored
An operating system is software. Most software eventually stops being updated.
Microsoft has historically done a pretty reasonable job at delivering security patches to old versions of Windows but that eventually ends.
Apple tends to EOL their OS updates relatively sooner but they will still sign security patches for older versions at times.
Your dad's computer may continue to be technically operable but will inevitably become functionally obsolete.
It's unfortunate but it happens.
Automobiles that required leaded gas to run right might be a good analog here: you could/can keep them running, but at what cost. Leaded gas was a known health danger so the benefits in that regard were clear, but also look at the advances that have been made in internal combustion engines since leaded gasoline was phased out.
Likewise, an old computer (namely one that is connected to the internet) becomes a risk and Microsoft does not have the impetus to continue supporting it.
And this is the point when the suggestion to install a friendly version of Linux is made. But frankly I'm not sure I'd even go to that trouble before reviewing what your dad's needs actually are and considering other devices that may actually be a better solution for the time and money.
Since then there was no major rethink of the OS architecture, I think.
Case in point - though not a topic of this particular discussion, neither of the three were designed with security in mind. Most of the security features are, in my opinion, bolt-on afterthoughts. This is just my opinion though.
For major companies that are profit-driven such as Apple or Microsoft, operating system development takes a major backseat as these companies have already carved out a sizable market share and don't need to invest much to maintain their dominance as they have self-sustaining app ecosystems for their OS which continue to draw users reliably.
Sure there are people innovating everyday in operating system development like with Haiku and Redox. Many Linux and UNIX distros are very active as well.
But for the major players, it's low priority, as it gives low return to shareholders. Which means the overwhelming majority of users won't benefit from most of these new innovations until they become sufficiently innovative that they become incredibly enticing (likely to expand the market share of a major player) or become either a market threat to a major player by being enticing to app developers leading to a them developing their own self-sustaining ecosystem of apps which draws users away from major players thus creating meaningful competition.
Which is fine, there's no reason you should be. But it means you're barking up the wrong tree.
But I would argue that for a company like Apple, their next iPhone release takes priority and will get a significantly larger allocation of their resources than the next OS level feature.
Overall, I think OS research is probably at a more interesting point in history than mobile hardware. There really is amazing competition happening between Linux/macOS/Windows and the users are getting those benefits. Research into secure computation and encryption is being integrated at the hardware level, security research is delving into lots of interesting problems w.r.t. badly behaving programs and also programs that behave correctly but attempt to perform malicious actions (i.e. buffer overflows vs keyloggers), and as lame as it sounds Linux's massive kernel improvements (I'm thinking specifically about their work on mutexes) have allowed them to become one of the quickest OS's in history.
It also brushes up against the question of what we're even calling OS research. The secure enclave was an iPhone first piece of hardware, but its concepts, development, and execution were certainly done by people who I would call OS researchers.
In a world with security updates, updates seemingly every day, every week, and monthly large updates, this would be such a great feature on MacOS.
I suppose those "System Restart Required" messages on the console from Ubuntu Server after updates are just imaginary then? /s
Still, it's inoffensive enough that I haven't bothered tracking down how to make it act sane again.
I just want them to not do anything, even security updates, without my explicit permission despite their fears over the security of my system. I have reasons I'm not updating right now. It comes down to the question "who's damn system is it, anyway?"
I'm sure that there are ways to avoid ever restarting, but none of the major Linux desktops have figured it out as far as I can see.
Actually the worst part is that if you prolong it long enough it will install.
But, Ueah, how do they get away with it? It’s just something you live with. I guess this is like how people just resigned to keeping the IE toolbars in the nineties.
after this was done I could not ise microsoft office, to which I have a license key. An "update" to office 365 was promted, to which I also accepted .... turns out office 365 is a subscription based product.
as a user with some knowledge of open source alternatives I dont see why these two corporations are lowering the incentive for me to keep using their products, at one point it will just be easier to boot something like manjaro or ubuntu from the hardware and get rid of reminders and subscription offers.
I am actually open for HN users suggestions for an OS replacement for an MBP from late 2013
It says something like: Do you want to update iOS.
It then has a YES and a CANCEL but also a check box to say don’t ask again, but it it only pays any attention to the checkbox if you click YES for this time. Cancel just closes the dialogue and does nothing.
Dark patterns.
Sometimes OS upgrades delete your mail:
https://www.digitaltrends.com/computing/apple-mail-app-catal...
So that's the world we live in. However I think you have a very good point and silent updates are an okay end-game, as they are with browsers. The stakes are very high, as they are with browsers.
With browsers, here are the table stakes with auto updates: a silent update without a prompt could introduce a security issue to all users - web sites are untrusted and can send any html they want to browsers. Users browse websites they don't trust all the time. They click links willy nilly. I could put in any URL into this comment and you would click it, since you know you are on latest Chrome or Firefox and you know any zero day would be patched. You view HTML across a very hard security sandbox. So browser security issues could be instant p0wnage, and keeping everyone always updated introduces a huge baddie incentive on each latest update. There's no chance to fix it if everyone gets it. The update mechanism also needs to be harder than Fort Knox. I imagine the infrastructure for Chrome's update role outs has 10,000 human hours of security hours spent on it.
The stakes are even higher with operating systems, though: people run local applications they may rely on and which could break. Here it is not so much security as functionality.
The software was written against and tested against a certain version. A new version can behave differently. Software can't adapt to that, it's not live.
With web sites, at least it's always being served. If it renders weird in latest chrome or firefox, there's a good chance it will get fixed. (The main reason for this would be if it wasn't compliant to begin with.) Web sites are always actively being served. If they're "dead" they're offline.
Software running locally is already there. It may or may not be updated. It could be dead but people still use it.
So the models are different but with very high stakes in each case.
I can ignore that, and install only security updates instead, but that is indeed the UI for the update to Catalina.
Relatively unsurprising, considering that the developer of Little Flocker now works for Apple.
Not having that functionality was dangerous enough that someone wrote a very involved program called Little Flocker, which was valuable enough to be sold to F-Secure. Apple hired the author (although it is perhaps not directly attributable to Little Flocker, he was well known in Apple-related security circles prior) and in the next major OS rev after that hire, the functionality was included stock in the OS.
People running Catalina are at greatly reduced risk from common threats from malware.
It's absolutely a security update.
It's a "security update" in that it improves security, but it's not a "security update" in terms of preventing risk for exploits that have come out or become popular since the last patch.
When people talk about always installing security updates as soon as possible, they mean the latter.
Your comment would be fine with just the second sentence.
hilarious.