The recently reported security flaw in iOS ( About the security content of iOS 7.0.6) affects OSX as well: Apple promises fix 'very soon' for Macs with failed encryption | Reuters
OSX users should stay off any unprotected wifi networks until the flaw is patched.
-
For those not clicking the links, it's a major flaw in Apple's implementation of TLS/SSL security. Apple seems to have released a patch for iOS, but no such luck for OSX, so I'd avoid doing anything that requires security (online banking, email, etc.) until it's fixed.
Apple and the SSL/TLS bug: Open questions | ZDNet -
-
saturnotaku Notebook Nobel Laureate
-
Turns out that the problem is a single extra line of C code (a GOTO statement) that was probably accidentally pasted in to a SSL-related function. I wonder how long it'll take to do a Ctrl + Z on that and push that update to Mavericks users
.
When will Apple get serious about security? | ZDNet
Also, what respectable programmer uses GOTO? Seriously... wth? -
when will apple get serous about security? apple's the most secured os used in the mainstream. idk what that article is thinking.
-
davidricardo86 Notebook Deity
Great I see this thread after logging in to important sites.
Sent from my XT1049 using Tapatalk -
Isn't the flaw mainly when you use an unsecured network? Banks etc use their own SSL so I believe that the problem is on the apple side especially if you are on an unsecured network.
I am thinking of moving to thunderbird completely as Mail is broken anyway. The mails stop syncing at times even though it has improved much from Mountain Lion days. -
-
kornchild2002 Notebook Deity
It's been four days. It takes time for tech companies to come out with an update, test it in-house, and then release it. People would be complaining a lot louder if Apple patched Mavericks only to cause other issues. Apple may have a fix but it will require some time before they release it.
-
That may be, but they did release the iOS fix last Friday, the same day the problem was reported publicly.
-
-
saturnotaku Notebook Nobel Laureate
10.9.2, which fixes this issue among other things, has been released. No need to wait for the App Store to populate as Apple is providing direct download links to regular and combo updates as they have in the past.
Combo update for 10.9-10.9.1
Point update - for 10.9.1 onlydavidricardo86 likes this. -
kornchild2002 Notebook Deity
OSX security flaw
Discussion in 'Apple and Mac OS X' started by jimbob83, Feb 23, 2014.