The Berlin Bassline Brief logo

The Berlin Bassline Brief

Archives
Log in
Subscribe
September 16, 2026

Berlin Bassline Brief #19: a strong opinion on the AI research question, Golden Gate release, moral imputability problems in current tech, new Apple VM tool, Background Security Improvements

Berlin Bassline Brief #19: Zdziarski drops some science, Golden Gate and another Screen Sharing CVE, algorithmic responsibility paper, Box of Apples VM tool, and Apple’s Background Security Improvements.

"What bear these ships? —what news, what freight,
Do they bring us through the Golden Gate?"


Welcome to the middle of September! Here in Berlin, the formerly-little corvids of the summer are setting out on their own, and you can hear them before you see them, much like the university students.

Security, General:
Mr. Zdziarski speaks for me: https://www.zdziarski.com/blog/?p=13970

I think we’re in a general issue right now where we’ve had a few outflows of rigorous people either getting turned off or fired from that industry sector for being Debbie Downers, and a few inflows of not-rigorous people who are a little excited by chaos or just drawn to a gold rush, but we’re discussing it as if it’s at a peak of rigor, even though, that tweet. We do have several examples of industries that would be this dangerous under this selection filter, and have occasionally become so.

Security, Apple Platforms:

Golden Gate is out, lots more security fixes including one more of those wily Screen Sharing CVE variants (I think this was the one that ended up under active exploitation due to the not-great early public discussion about it, so please take the patch on older OSes even if you aren't ready for 27.0): https://eclecticlight.co/2026/09/14/apple-has-released-macos-golden-gate-and-security-updates-to-tahoe-26-7-sequoia-15-8/

Interesting Paper:

“When responsibility cannot arise: algorithmic mediation and the preconditions of moral imputability” by Åke Elden. As the Germans say, "Tja." https://link.springer.com/article/10.1007/s43681-026-01359-x

Interesting Tool:

Box of Apples is a new macOS VM client from Thijs Xhaflaire, many very cool features, but also appears to be closed source: https://github.com/txhaflaire/box-of-apples

Apple Platforms Security Concept of the Week:

Background Security Improvements: https://support.apple.com/en-us/102657




The Berlin Bassline Brief is curated and commentated by Halle Winkler, CEH, Berlin – get in touch if you could use security consulting, fractional AppSec leadership, or team training in the area of iOS and macOS secure development.

Check out my course Breaking Into the Security Mindset, for engineers and engineering managers, to get to grips with the new application security landscape: https://www.driyourcareer.com/security

RSS

Don't miss what's next. Subscribe to The Berlin Bassline Brief:
Older → Berlin Bassline Brief #18: mass agentic anti-human deception, no more macOS keychain copying between machines, ACM takes on recommender badness, microharness
Halle Winkler on LinkedIn
Powered by Buttondown, the easiest way to start and grow your newsletter.