Hacker Newsnew | past | comments | ask | show | jobs | submit | lapcat's commentslogin

> doing the test on the same computer wouldn't have caught this problem.

Doing it on a second computer wouldn't have caught this problem either with macOS 26.3 and earlier, because it was introduced in 26.4.


> This is pretty much how it's suppose to work...

No, it's not, and that's not how it ever worked in macOS 26.3 and earlier.

This change was introduced in 26.4 for some reason.


This was introduced, unannounced, in macOS 26.4! See my blog post for more information: https://lapcatsoftware.com/articles/2026/9/4.html

The iCloud keychain is separate from the login keychain. The Passwords app doesn't use the login keychain.

I have no idea which keychain is in which, but the last time I migrated from one Apple laptop to another, I couldn't get the automated tool to work at all, so I restored a physical backup, went through the sign-in process, and passwords and passkeys migrated correctly.

Passwords and passkeys are in the iCloud keychain. You can technically save passwords in the login keychain (not sure about passkeys), but if you’re using the Passwords app it will be in the iCloud one.

Even more confusing. Do we know which data is in which keychain?

Look in the Keychain Access app.

Migration Assistant uses the old Mac, which can unlock its login keychain and allow the keychain items to be copied.

What if the old Mac is dead, stolen, lost? Those are the scenarios in which one recovers on a new machine from a backup.

What information from your login keychain do you expect to need on your new computer?

There's not really a plausible answer to that question, because the login keychain data is almost entirely specific to that host.

To iron-man your argument: Apps that store account credentials to third party services will need to be signed in again.

If you were using http basic auth for a website and saving that, then it was probably in there.

Private keys and certificates you manually imported, or that were created by an application for your host. This is the closest to a plausible answer, imo.


> What information from your login keychain do you expect to need on your new computer?

Pretty much everything?


Then you're in trouble.

Migration assistant can also use a TM backup, I’m pretty sure

Does the macoOS login keychain get backed up by Time Machine backups

Yes

> in a way that could restore the keychain if the original machine's Secure Enclave is lost or destroyed?

Apparently not


"Apparently"? Is this something that can be tested with VMs?

I've tested with VMs. However, I'm unclear about the relationship if any between VMs and the secure enclave.

Original title "Manually copying login keychain files from one Mac to another no longer works on Secure Enclave-equipped Macs running macOS Tahoe" trimmed to fit HN maximum length.

I would add this:

  <meta name="viewport" content="width=device-width, initial-scale=1">
All you need is initial-scale=1, not width=device-width, which is redundant.

"You do not need to set every viewport property. If only a subset of the properties are set, then Safari on iOS infers the other values. For example, if you set the scale to 1.0, Safari assumes the width is device-width in portrait and device-height in landscape orientation." https://developer.apple.com/library/archive/documentation/Ap...

I've confirmed the behavior in testing.


The latest MDN recommendation is to use only width=device-width, with initial-scale being mostly redundant.

Source: https://developer.mozilla.org/en-US/docs/Web/HTML/Reference/...


I've just learned that initial-scale was removed from the MDN recommendation only a few days ago... by the submitted article author!

https://github.com/mdn/content/pull/45479


Which was premature because most people have missed that initial-scale doesn’t actually default to 1: https://github.com/mdn/content/issues/45570

This may be Safari-specific? Google recommends setting both: https://developer.chrome.com/docs/lighthouse/best-practices/...

You don't need both, but you should have the width set. From that page:

> A page fails the audit unless all of these conditions are met:

> - The document's <head> contains a <meta name="viewport"> tag.

> - The viewport meta tag contains a content attribute.

> - The content attribute's value includes the text width=.

I researched and tested this extensively the other day. `<meta name="viewport" content="width=device-width">` is all you need. https://vale.rocks/micros/20260902-1350


> I researched and tested this extensively the other day. `<meta name="viewport" content="width=device-width">` is all you need.

This is incorrect. Try adding an <img> that's wider than the device width. Then the whole page gets zoomed and the text unreadably small.


The same will happen regardless in the case of content extending beyond the width of the viewport. With `initial-scale=1` it'll be a horizontal overflow, without it'll zoom out. I argue that the latter is preferable (https://vale.rocks/micros/20260908-1315) but either way should never reach users due to the usability fails and major accessibility issues.

When you brought these arguments up on Lobsters <https://lobste.rs/c/dsm1up> I said it wasn’t cut and dried but that my general feeling was of disagreeing with you. I’ve thought about it more since then, and firmed my position up: you should make sure that the presence of initial-scale=1 won’t affect anything (we agree on this point), but that if you make a mistake in this area, it’s much better to have it than not to (we disagree on this part). Of your five points:

Your first point is correct. It could be reasonable to omit initial-scale=1 during development, or have something that complains on width overflow.

Your second is unavoidable: omitting initial-scale introduces a worse failure (excessively small text).

Your third I disagree with: when overflow occurs it will almost always be obvious that you could scroll, because you’ll have text or image that runs to the inline-end edge of the viewport rather than being contained by a page margin as is universally practised.

Your fourth isn’t useful—by that argument all documents should be zoomed out until the entire thing fits on screen; but we don’t do that in general because having to manage the zoom to get a useful result is unpleasant, yet that’s what you’re advocating for.

Your fifth is irrelevant, I think entirely unrelated to initial-scale.


The "fifth" was probably from their essay <https://vale.rocks/micros/20260908-1315>, that was fourth on Lobsters (?)

> People often pair initial-scale=1 with overflow-x: hidden in their CSS […]

(That one in particular really seems like a strawman.)

Spotted under PPK's share <https://front-end.social/@ppk/117201706620768380>


Yeah, I was responding to the new micros post here rather than the earlier Lobsters list.

> I argue that the latter is preferable

I disagree vehemently. I couldn't disagree more. The text has to be readable. If you force the reader to zoom in order to read the text, your website is fundamentally broken.

Moreover, neither of these considerations apply to images: "you risk having content off-screen which cannot be focused by a keyboard" "A user is extremely unlikely to think to scroll horizontally to see the rest of a document"

"There is even great president for it with documents on the web" Typo: precedent.

> either way should never reach users

This seems practically unavoidable with images, especially screenshots for example. Device widths vary, image widths vary. There is no magical image width that fits every device width, unless the image is very narrow. Moreover, I try to avoid JavaScript altogether when possible, so I don't want custom JS image viewers all over the place.


> when incompetence becomes an accepted excuse

I couldn't have been any more explicit that it's not an accepted excuse: "Google has no excuse for incompetence".


Fielder's "The Rehearsal" on HBO was madly brilliant.

In particular, season 2 is truly a work of art. As you said, it is just flat out brilliant. If you haven't watched the final episode of nathan for you (season 4 episode 7), watch it. it's equally fantastic.

Pretty much all of Nathan's work is. The Curse is so intense, and it only gets more so from there.

s4ep07: "When I said your cake tasted like poo, I thought I was joking."

----

Thanks for The Rehearsal secondary-req. Added to my watchlist.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: