Archive for October 2026

Thursday, October 1, 2026

EagleFiler 1.9.22

EagleFiler 1.9.22 is a maintenance release of my Mac file/note organizer and e-mail archiving app. This version works around various bugs in macOS 27, adds capture support for the Thorium Web browser, and improves importing from Mariner Paperless.

Previously:

I Said No and Apple Said Yes

David Bushell (Mastodon, Hacker News):

I discovered that macOS 15.3 had enabled a feature that was phoning home every 15 minutes with personal data. And that I said “no” and turned it off.

[…]

And today I discovered that Apple had [in macOS 27] removed the “no” switch.

[…]

Digging through macOS 27 settings I turned off Siri (again). Of course, multiple unkillable Siri processes remain, stealing memory and writing data. For what purpose? Who knows. Note that they removed “Apple Intelligence” from this control.

[…]

All of this garbage was enabled after upgrading to macOS 27 despite me having “Apple Intelligence & Siri” turned off already. That was a rather explicit “no”, no?

Previously:

Accessing the Keychain Without the Password

Bob Gendler:

Since macOS 26.4, there’s been an issue with the keychain hiding in plain sight and that issue is it’ll take ANY password. Say what? The story behind CVE-2026–43728.

[…]

Where this is a bit more of a kicker…you can reset the keychain password without even knowing the real one.

[…]

Now did Apple fully fix it, well mostly. Something is different after macOS 26.4 (I believe it’s the new, User Authentication Daemon — userauthd). On macOS 26.3, if you ran security lock-keychain and then security unlock-keychain it HAD to be your keychain password. But now they added this note to the man page.

Unlocking the login keychain might succeed when an incorrect password is presented, if other unlock factors are available.

Previously: