Apple Security Alert

Oblivion

Just a heads-up for Apple device users ....


http://www.bbc.co.uk/news/technology-26335701


'According to researchers the security flaw had existed for months but no-one had reported it publicly.' Oh dear.

penrhyn

You are mistaken, there have never been or will ever be security issues with Apple devices.;)

ballyblack

more reading here;

http://gizmodo.com/why-apples-huge-security-flaw-is-so-scary-1529041062

nickcc

Never had a problem with my iPad and updated last software release. Bit more info would be useful especially if you believe there is a problem with Apple ( except the price)

shortchanged_2

Surely not. Apple products are infallible.

swvillafan

Sorry Apple doubters, a security release is available to download and install.

Choose 'Software Update' from the Apple menu or download it from here.

If you want to know more about the content of the update you can check this page out for more info!

Good job Apple!

Jivesinger

nickcc wrote: »

Never had a problem with my iPad and updated last software release. Bit more info would be useful especially if you believe there is a problem with Apple ( except the price)

Plenty of info here...
http://nakedsecurity.sophos.com/2014/02/24/anatomy-of-a-goto-fail-apples-ssl-bug-explained-plus-an-unofficial-patch/

gonzo127

swvillafan wrote: »

Sorry Apple doubters, a security release is available to download and install.

Choose 'Software Update' from the Apple menu or download it from here.

If you want to know more about the content of the update you can check this page out for more info!

Good job Apple!

really?

from the gizmodo artical linked already this security flaw has been a problem since September 2012 so roughly 18 months! and you think that its a good job?

please take off your rose tinted glasses, a security flaw which basically breaks the secure connection between your device and the website you are viewing being open to abuse for 18 months is a shocking issue and any company that has a problem like that should be shamed

securityguy

gonzo127 wrote: »

please take off your rose tinted glasses, a security flaw which basically breaks the secure connection between your device and the website you are viewing being open to abuse for 18 months is a shocking issue and any company that has a problem like that should be shamed

As it is on various security and software engineering mailing lists.

However, note that Adam Langley, part of the crypto Brainstrust for Chrome, reckons their testsuite wouldn't catch it either:

https://www.imperialviolet.org

And also note that on the cosmic scale of "complete and utter security disasters introduced into the codebase by programmers who clearly should have known better and then left there to launch exploits by the dozen" it pales into insignificance compared to:

http://www.debian.org/security/2008/dsa-1571

These things happen. Outside extraordinarily expensive and slow formal environments where new features takes years to deploy, software development is an inexact and error-prone (in)discipline. The instant bug is a shocker, that it was cross-platform makes it worse and that Apple had to wait several extra days to ship a fix for OSX 10.9 is appalling. However, no-one who has ever developed a software system more complex than adding two numbers together is currently doing anything more than studying what happened, learning from it, and quietly thanking $deity that it wasn't their code. I'd place money that the people throwing peanuts from the benches have never deployed security-sensitive code.

almillar

Never had a problem with my iPad and updated last software release. Bit more info would be useful especially if you believe there is a problem with Apple ( except the price)

You did have a problem with your iPad, there was a security problem with it! You just never got exploited, or never noticed it. This affects iOS AND OSX - iPads, iPhones AND computers.

swvillafan

gonzo127 wrote: »

really?

from the gizmodo artical linked already this security flaw has been a problem since September 2012 so roughly 18 months! and you think that its a good job?

please take off your rose tinted glasses, a security flaw which basically breaks the secure connection between your device and the website you are viewing being open to abuse for 18 months is a shocking issue and any company that has a problem like that should be shamed

Yeah maybe I was a little bit too nice on my post to Apple.

Anyhoo, the exploit has been fixed so lets all move onwards and upwards!