[Veltliner]

Yesterday I got the news about the most recent Apple security update, but I was working, so I didn't do it right away.

Now I checked for new software, and the security update and the graphics update are no longer on the list. I noted that the shutdown yesterday night took a bit longer.

a. Did the security update happen without my say-so?

b. How can I make sure I received the most recent security update? I don't even know what it's called.

[-Q-]

A) They can be downloaded if you have that option checked, but I don't believe they can be installed without your authorization.

B) System Preferences>Software Update>Installed Software tab.

[Cold Warrior]

system prefs > software update > installed software

It'll show you what's installed, sort by date.

[64stang06]

Chances are, as already stated, it downloaded the update in the background and then notified you. Now, when you go to shut down the computer, it does come up with a dialog asking if you want to install the update(s) now, and if ignored, will do it automatically after 60 seconds. So chances are, you chose to shut down, walked away/got up and the update went ahead and installed.

[turtle777]

Originally Posted by 64stang06 

Chances are, as already stated, it downloaded the update in the background and then notified you. Now, when you go to shut down the computer, it does come up with a dialog asking if you want to install the update(s) now, and if ignored, will do it automatically after 60 seconds. So chances are, you chose to shut down, walked away/got up and the update went ahead and installed.

I don't think it would install w/o admin credentials.

-t

[Veltliner]

Originally Posted by turtle777 

I don't think it would install w/o admin credentials.

-t

In this case it did. The log says it was installed around 3:00 PM today. That's when I ran software update to check for software, and it came up empty (except for an iTunes update I'm not interested in).

So it installed without me giving the admin password, without even showing me it installed.

[turtle777]

Strange.

I know I had to supply my credentials when it installed this security update.

-t

[Spheric Harlot]

The security update did not require a password, iirc.

[turtle777]

Ha, maybe it was the graphics card update. I installed both at the same time.

Still weird why a GPU driver would need credentials, and a security update wouldn't.

-t

[Spheric Harlot]

Depends what the security update applies to.

[turtle777]

It doesn't make sense. If the security update only changes things that can be changed w/o admin rights, anyone can easily revert the change or do worse things.

-t

[Spheric Harlot]

He'd still have to get me to run software to reinstate those loopholes, though?

[Veltliner]

It was both the security update and the graphics update at the same time.

When I got the note about the new update, I unchecked iTunes, but then decided to not restart the computer just now, as I was in the middle of Photoshop work.

Then, the next day, the software update didn't list the graphics update, nor the security update, just the iTunes update. And the updates were installed without me entering the admin password.

[64stang06]

Originally Posted by turtle777 

I don't think it would install w/o admin credentials.

-t

It does when you logout, unless you're not an admin. I know, I had to reinstall 10.6 this weekend and that scenario happened to me.

[P]

Originally Posted by turtle777 

It doesn't make sense. If the security update only changes things that can be changed w/o admin rights, anyone can easily revert the change or do worse things.

-t

Depends on what the hole was. If the hole was privilege escalation from user to admin or root, then yes, it's pointless if it didn't require a password. If the hole was a buffer overflow or something in a file, you end up with a chicken and egg scenario after the update - you have to downgrade Preview (say) to make it execute your code, and you have to execute code to downgrade Preview.

[Veltliner]

Originally Posted by 64stang06 

It does when you logout, unless you're not an admin. I know, I had to reinstall 10.6 this weekend and that scenario happened to me.

Looks like the fact of logging in is already a yes.

Could be that Apple makes its security updates "mandatory" to protect lazy user's computers.

This would make sense as no person would decline a security update.

[Veltliner]

I just got the software update on iTunes 10.

On the bottom, on the left, it says: "downloaded". Looks like the software is already on my computer, downloaded in the background.

But it's not in "Downloads".

Could be that this downloads automatically, and you only click to install.

[Spheric Harlot]

Well, the automatic downloads have been standard since at least 10.4, IIRC.

There's a setting in the system prefs to that effect.