PSA: Libxslt is unmaintained and has 5 unpatched security bugs(vuxml.freebsd.org)

121 points by burnt-resistor 1 year ago | 71 comments

OpenSSH 10.5/10.5p1(openssh.org)

103 points by voxadam 2 months ago | 32 comments

OpenSSH Race condition resulting in potential remote code execution(openssh.com)

85 points by ggeorg 2 years ago | 16 comments

iTerm2 critical security release(iterm2.com)

630 points by tjwds 1 year ago | 388 comments

Changelog for iTerm2 3.5.11, a critical security fix for an SSH integration bug that logged terminal input and output to /tmp/framer.txt on remote hosts.

OpenSSH 10.4/10.4p1 Released(openssh.org)

103 points by throw0101a 3 months ago | 19 comments

OpenSSH Post-Quantum Cryptography(openssh.com)

428 points by throw0101d 1 year ago | 114 comments

OpenSSH documentation page explaining its post-quantum key agreement algorithms, defaults since 9.0 and 10.0, and the warnings for non-PQ key exchange in OpenSSH 10.1.

Native Secure Enclave backed SSH keys on macOS(gist.github.com)

436 points by arianvanp 11 months ago | 181 comments

A GitHub Gist explaining how macOS Tahoe can natively generate and use Secure Enclave-backed SSH keys, replacing tools like Secretive.

macOS Tahoe brings a new disk image format(eclecticlight.co)

341 points by zdw 1 year ago | 123 comments

Eclectic Light Company blog post describing the new disk image format introduced in macOS Tahoe.

You can't trust macOS Privacy and Security settings(eclecticlight.co)

449 points by zdw 6 months ago | 152 comments

Eclectic Light Company blog post by Howard Oakley explaining why macOS Privacy & Security settings cannot be relied upon to reflect actual app permissions.

Tell HN: Apple not letting removal of AI models on macOS 27 is outrageous

8 points by busymom0 19 days ago | 0 comments

A Tell HN post complaining that macOS 27 keeps about 30 GB of Apple Intelligence models on disk even when Siri/AI is disabled, with no way to remove them.

Setting Up SSH Keys on macOS with Touch ID(nmattia.com)

61 points by civilchaos 5 days ago | 49 comments

A blog post by Nicolas Mattia explaining how to set up SSH keys on macOS that are protected by Touch ID.

Hackintosh is almost dead(aplus.rs)

482 points by ingve 2 years ago | 473 comments

Blog post by Aleksandar Vacić arguing that Hackintosh, running macOS on non-Apple hardware, is nearly dead, reflecting on his builds since 2020.