Dave Nanian and Bruce Lacey, at Shirt Pocket:

Mistakes are a part of life.

They’re not a great part, but when viewed “correctly”, they’re an opportunity.

Well, we have three opportunities, brought to our attention by a security researcher. They’re security vulnerabilities that have been in SuperDuper! since the very first version, released almost 22 years ago.

Today, we’re releasing fixes for the current release (the SuperDuper! v3.20 Beta is already fixed), a discussion of the problems, and the steps users can take to mitigate the issues if they cannot install the update.

We don’t know of any bad actors making use of these exploits as of this post.

Another good postmortem, with technical details and an apology.

My thanks to Clerk for sponsoring last week at DF. Clerk makes authentication for iOS apps effortless — just drop in pre-built SwiftUI components for sign-in, MFA, and profile management. Fully customizable, always in sync with Apple’s design system, and packed with features developers love: social sign-in, user roles, and organization management.

Launch faster, stay secure, and scale confidently, whether you’re building the next big thing or a startup MVP. See how Clerk makes complete user management easy for modern iOS teams.

The bottom line is that users setting up new Apple Watches in the EU will now get a somewhat slightly worse experience in the name of parity with accessories made by third-party companies. It remains to be seen whether users of third-party iPhone accessories and peripherals in the EU will see any benefit at all.

For your weekend listening enjoyment: a new episode of America’s favorite 3-star podcast, with special guest Stephen Robles. Topics include indie media and YouTube, Shortcuts and automation, and the state of podcasting.

Sponsored by:

• Uncommon Goods: Out of the ordinary gifts, great for the holidays. Save 15% off your next purchase after following that link.

Luke Igel and Riley Walz made a phony Gmail interface that, rather than showing you your email, shows you Jeffrey Epstein’s emails:

You’re logged in as Jeffrey Epstein. We compiled these Epstein estate emails from the House Oversight release by converting the PDFs to structured text with an LLM.

Brilliant.