Very cool, thanks so much for your answers, and for bearing with my
"layman" point of view… Nice cat by the way :)

I think I understand this enough to get me by for the moment.

Thanks to everyone for doing what you do!
Christopher

On Tue, May 17, 2016 at 5:26 PM, Brandon Allbery <[email protected]>
wrote:

> On Tue, May 17, 2016 at 6:20 PM, Christopher Fick <[email protected]
> > wrote:
>
>> Just for clarity, I was clicking (XQuartz>Check for XQuartz updates...)
>> in the "app" (Is app the correct terminology here?).
>> The only reason XQ would have literally auto-updated is if it's set to do
>> that by default. I typically turn auto-update off if I have an option, of
>> which I don't recall having one put in front of me at any point when
>> installing.
>> Does the term "auto-update" apply to what I was doing as well--kind of,
>> sort of, halfway manually updating?
>>
>
> It's using the auto-update framework, as opposed to you having to visit
> xquartz.org to see if a new version is available, so yes. And it relies
> on an XML feed that is no longer there, and which can't be safely
> redirected because of the Sparkle MITM vulnerability.
>
>
>> All that aside, if I understand correctly:
>> Basically, anyone with a version earlier than XQ 2.7.9 must update by
>> manually downloading from the (new) website because the website location
>> has changed since 2.7.8... The reason updating/auto-updating though the XQ
>> app doesn't work is because it wants it's update from the previous website
>> location. The previous website could in theory link to the newer one for
>> this update, but because of MITM it does not. Do I have that correct more
>> or less?
>>
>
> Pretty much, yes.
>
>
>> Just for peace of mind. In the future if I do choose to update:  Do I
>> need to go through some measure to uninstall the previous version of XQ? Or
>> is it perfectly fine to just download and install it over the old version?
>> I assume I will be prompted to replace the older version if I install it
>> into the same location.
>>
>
> You don't actually get an option to install it elsewhere. You do get
> several confirmation prompts before the install, though. And you don't need
> to uninstall anything, just install the new one (or reinstall the old if
> needed).
>
> --
> brandon s allbery kf8nh                               sine nomine
> associates
> [email protected]
> [email protected]
> unix, openafs, kerberos, infrastructure, xmonad
> http://sinenomine.net
>
 _______________________________________________
Do not post admin requests to the list. They will be ignored.
X11-users mailing list      ([email protected])
Help/Unsubscribe/Update your Subscription: 
https://lists.apple.com/mailman/options/x11-users/archive%40mail-archive.com

This email sent to [email protected]

Reply via email to