Apple Releases High Sierra Security Update ⇥ support.apple.com

This update includes fixes for the encrypted disk password-as-hint bug as well as the keychain exfiltration bug that was revealed last week.

Unfortunately, Apple recommends that those affected by the encrypted disk bug install this security update, then format and restore their drive. This applies mostly to those who think that there’s a chance that their disk password may have been exposed — I don’t set password hints, so this bug didn’t affect me. But if you’re one of the unlucky ones who are affected, you know how you’ll be spending your weekend.

I still want to know how a bug like the latter bypassed quality control checks and a multi-month developer beta, though. It’s not confidence-inspiring.