this post was submitted on 09 Apr 2026
124 points (83.3% liked)

Technology

84987 readers
3564 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 3 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] vk6flab@lemmy.radio 48 points 1 month ago (4 children)

So, why is this being disclosed here and not a CVE reported to Apple?

While contemplating that, my Mac has been up for longer than that and it's working fine.

The Mac I had before that was up for years, also fine.

So .. what is this really about?

[–] mushroommunk@lemmy.today 35 points 1 month ago (1 children)

A lot of these new AI found bugs are proving to be nothing burgers. Just a waste of money to try and hype the latest models.

They're either in old code not actually used anymore or miss a system interaction that fixes the supposed bug or just straight up are wrong.

LLMs are shit

[–] homes@piefed.world 9 points 1 month ago* (last edited 1 month ago)

Yeah, macOS, like most UNIX/BSD and Linux systems (even NT systems), use BSD‘s rather ancient TCP/IP stack. And, like most systems, have found their own unique ways around whatever bugs once existed (or still exist) in that stack.

This case uses iMessage as an example, and it would be kind of foolish not to think that between the TCP/IP stack and macOS‘s internal messaging system there isn’t some kind of time reset handler before it gets handed off to iMessage.

[–] hersh@literature.cafe 11 points 1 month ago (1 children)

I've also had Macs online for years without issue.

I guess it only applies to "ephemeral" ports 49152–65535, though I'm not sure what range macOS actually uses. Wikipedia has numbers for Linux and various Windows versions but not macOS: https://en.wikipedia.org/wiki/Ephemeral_port

So does that mean typical desktop usage, like email, web browsing, SSH, etc. would be unaffected? Anyone have any insight on this? I'm not a networking expert myself.

I can't believe the claim that "everything else dies" when that goes directly against observed reality.

[–] frongt@lemmy.zip 3 points 1 month ago

Ephemeral ports are used most often for outgoing traffic. Like if you connect to HTTP, the remote port is 80, but the local port could be any TCP port in the ephemeral range.

[–] homes@piefed.world 4 points 1 month ago* (last edited 1 month ago) (1 children)

Yeah, I run a macOS server (on 10.13.6 no less) that regularly has several months of uptime without issue, and I ran my new MacBook Pro for six months since I bought it perfectly fine without rebooting it until a recent update forced me to. I’m not sure what the problem here is.

[–] warbosstodd@piefed.social 6 points 1 month ago (1 children)

there may be some “secret sauce” here that combines a certain version of OS, hardware and DHCP. I thought it was an interesting read and thought I would share.

[–] homes@piefed.world 2 points 1 month ago

I suppose it is interesting, and I wasn’t complaining about you posting it. I was more a bit puzzled about the somewhat grandiose claims that the headline makes. That’s on the author, not on you.

[–] Zerot@fedia.io 2 points 1 month ago (1 children)

Because it's not a security issue? It is a bug that would affect long running MacOS machines which is quite low impact.

[–] vk6flab@lemmy.radio 2 points 1 month ago (1 children)

CVE: Common Vulnerabilities and Exposures

[–] ilinamorato@lemmy.world 1 points 1 month ago

Not a vulnerability or exposure. There's no threat vector here.