New Apple ‘Rapid’ Update is Slow, Messy FAIL

Mac and iPhonePATCH NOW! Oh, wait, you can’t: “You are no longer connected to the internet,” it sneers.

Apple’s new Rapid Security Response update is a mess. With broken apps and bogus error messages, the whole thing seems a bit half-baked.

No doubt it’s important to install. But, in today’s SB Blogwatch, we’re in the dark—because there aren’t any release notes.

Your humble blogwatcher curated these bloggy bits for your entertainment. Not to mention: Hidden patterns inside cheese.

RSR RSI — but Keep Trying

What’s the craic? Malcolm Owen reports—“Apple issues Rapid Security Response update”:

iOS 16.4.1 (a)
A Rapid Security Response update is a special kind of update that doesn’t require users to perform a normal software update. Instead of a lengthy update procedure, the update can instead be quickly downloaded and installed within minutes. … This can include fast fixes for urgent security issues, such as actively used exploits … to mitigate risks of infection or data loss.

So far … every attempt to update has been met with a warning that the device cannot verify the security response [and] that the device is “no longer connected to the internet” (when that isn’t the case). This may be a case of server load, but the download is very small.

When an RSR is applied, the update adds a letter to the end of the version number, for example turning iOS 16.4.1 to iOS 16.4.1 (a). … RSR installation can be disabled, with the content of the RSR rolled into the next standard software update.

Why isn’t it working? Anam Hamid explains—“Here’s why”:

The rollout is staggered
Initially, a good many iPhone users were unable to install the update. They got an error message that said that the device was ‘unable to verify security response’ because it was not connected to the internet, even though that wasn’t the case.

The rollout is staggered. … So if you still haven’t received it or are still having trouble installing it, the issue will likely be resolved in the next 48 hours.

Wait. Pause. 48 hours? vertsix laughs out loud:

Not very rapid if they take just as a long as a regular software update—lol.

However, dhinakg disputes the theory it’s because of a staggered rollout:

This error is not related to ramping. Ramping (aka phased rollouts) is basically when automatic update notification is delayed on a schedule.

There’s an error with Apple’s update signing server (TSS). … This is likely a screwup for the first public RSR and should be fixed in a few hours, just give it a bit. Guess Apple should’ve provided a more specific string for Tatsu rejection than just using the generic “no longer connected to the internet.”

Got yours yet? John Gruber notes another faux pas:

Updates aren’t listed
I’ve seen a few of these RSR updates while running beta versions of iOS, but I suspect those were all just tests from Apple of the RSR delivery and update mechanisms. It’s a great new mechanism for Apple, but one that they’d only use for truly significant bugs — ones they realize are being actively exploited in the wild, or could be to deeply detrimental effect.

[But it] seems a little weird that today’s RSR updates aren’t listed yet on Apple’s security updates page. In recent years Apple has been very diligent about updating this page. … These new RSR updates seem to exist outside this documentation system for now.

Is there a downside? Yes, if you’re in the middle of something, as niij nudges:

Warning: If you install this it doesn’t give you the option to delay a reboot to apply the update. I got a notification my computer would be restarting in 60 seconds as soon as the install completed.

Rapid Apple updates? Applehu Akbar experiences a touch of déjà vu:

A rushed Apple update years ago [bricked] all of the machines that installed it in the initial hours before the problem was discovered. The employee responsible is probably managing a Cinnabon location in Ohama today under Witness Protection.

Aaaand there it is. Here’s Num Lock:

Since installing this, HomeKit thinks I’m not home and I can’t seem to fix it. I’m about three motion alerts away from uninstalling it.

Meanwhile, turbineseaplane quips thuswise:

It would appear that this “Rapid Security Response” was released a bit too rapidly.

And Finally:

Another cheesy video

Previously in And Finally


You have been reading SB Blogwatch by Richi Jennings. Richi curates the best bloggy bits, finest forums, and weirdest websites … so you don’t have to. Hate mail may be directed to @RiCHi or [email protected]. Ask your doctor before reading. Your mileage may vary. Past performance is no guarantee of future results. Do not stare into laser with remaining eye. E&OE. 30.

Image sauce: The Average Tech Guy (via Unsplash; leveled and cropped)

Richi Jennings

Richi Jennings is a foolish independent industry analyst, editor, and content strategist. A former developer and marketer, he’s also written or edited for Computerworld, Microsoft, Cisco, Micro Focus, HashiCorp, Ferris Research, Osterman Research, Orthogonal Thinking, Native Trust, Elgan Media, Petri, Cyren, Agari, Webroot, HP, HPE, NetApp on Forbes and CIO.com. Bizarrely, his ridiculous work has even won awards from the American Society of Business Publication Editors, ABM/Jesse H. Neal, and B2B Magazine.

richi has 605 posts and counting.See all posts by richi

Secure Guardrails