Forum Home
PC World Chat
 
Thread ID: 136380 2014-02-23 06:04:00 iPad alternative Cicero (40) PC World Chat
Post ID Timestamp Content User
1368469 2014-02-24 12:04:00 Cicero, don't get an iPad:

www.theregister.co.uk

Interesting, one of their own Ex security gal isn't too happy with how they are handling the patch ...

www.forbes.com


Paget focused on Apple’s questionable decision to publicize the bug in iOS while leaving the same vulnerability unpatched in millions of desktop devices, practically inviting hackers to take advantage of the flaw. “Did you*seriously*just use one of your platforms to drop an SSL 0day on your other platform?” she writes, using the phrase “zero-day,” an industry term for a previously unknown security flaw. “As I sit here on my mac I’m vulnerable to this and there’s nothing I can do, because you couldn’t release a patch for both platforms at the same time? You do know there’s a bunch of live, working exploits for this out in the wild right now, right?”
Geek4414 (12000)
1368470 2014-02-24 12:21:00 The plot thickens ...

Apple's 'Gotofail' Security Mess Extends To Mail, Twitter, iMessage, Facetime And More - www.forbes.com

Soltani’s work, however, shows that the problem extends further, leaving many users with few options for secure communications until Apple issues a fix for its desktop software.
Geek4414 (12000)
1368471 2014-02-24 21:21:00 The plot thickens ...

Apple's 'Gotofail' Security Mess Extends To Mail, Twitter, iMessage, Facetime And More - www.forbes.com

Soltani’s work, however, shows that the problem extends further, leaving many users with few options for secure communications until Apple issues a fix for its desktop software.

But "Apple Mac's dont get virus's "
:banana

could Mac's & ithings be a security disaster waiting to happen
1101 (13337)
1368472 2014-02-24 21:43:00 But "Apple Mac's dont get virus's "
:banana

could Mac's & ithings be a security disaster waiting to happen

That's not a virus. A coding flaw..Yes.. but not a virus.
Webdevguy (17166)
1368473 2014-02-24 22:03:00 That's not a virus. A coding flaw..Yes.. but not a virus.

I know that, was being facetious, hence the banana :-)
point being, many mac owners honestly think they are immune to this sort of thing
1101 (13337)
1368474 2014-02-24 22:10:00 I know that, was being facetious, hence the banana :-)
point being, many mac owners honestly think they are immune to this sort of thing

No one is immune to coding flaws, viruses, yes, coding flaws.. not so much :)

Anytime a human writes some code it paves the way for mistakes ( no matter how simple) to slip in.

Haven't heard anything over the interwebs from Apple so I'm guessing they are investigating the issue in their usual "wall of silence" way.
Webdevguy (17166)
1368475 2014-02-24 22:53:00 Apple fixes security flaw in iOS, perhaps thanks to Snowden?
www.iphonejd.com(iPhone+J.D.)

According to PRISM documents leaked by Edward Snowden, the NSA gained the ability to intercept encrypted iPhone traffic in October of 2012, and that's apparently right after the bug fixed by iOS 7.0.6 was introduced. As Gruber notes, this could mean all sorts of things. It could mean that someone at Apple intentionally added a backdoor for the NSA. Or it could mean that someone at Apple made a simple coding mistake but the NSA found out about it and exploited it.


On the Timing of iOS’s SSL Vulnerability and Apple’s ‘Addition’ to the NSA’s PRISM Program
daringfireball.net

1.Nothing. The NSA was not aware of this vulnerability.
2.The NSA knew about it, but never exploited it.
3.The NSA knew about it, and exploited it.
4.NSA itself planted it surreptitiously.
5.Apple, complicit with the NSA, added it.

Me, I’ll go as far as #3.1 In fact, I think that’s actually the optimistic scenario — because we know from the PRISM slides that the NSA claims some ability to do what this vulnerability would allow. So if this bug, now closed,2 is not what the NSA was exploiting, it means there might exist some other vulnerability that remains open.

DOCUMENTS: NSA Has 'A 100% Success Rate' Putting Spyware On IPhones
www.businessinsider.com.au
Geek4414 (12000)
1368476 2014-02-24 22:58:00 Apple fixes security flaw in iOS, perhaps thanks to Snowden?
www.iphonejd.com(iPhone+J.D.)

According to PRISM documents leaked by Edward Snowden, the NSA gained the ability to intercept encrypted iPhone traffic in October of 2012, and that's apparently right after the bug fixed by iOS 7.0.6 was introduced. As Gruber notes, this could mean all sorts of things. It could mean that someone at Apple intentionally added a backdoor for the NSA. Or it could mean that someone at Apple made a simple coding mistake but the NSA found out about it and exploited it.

www.businessinsider.com.au


Nothing more than rumor and speculation at this stage.

Tim Cook has already covered that here (mashable.com)
Webdevguy (17166)
1368477 2014-02-24 23:08:00 Nothing more than rumor and speculation at this stage.

Tim Cook has already covered that here (mashable.com)

"Or it could mean that someone at Apple made a simple coding mistake but the NSA found out about it and exploited it."

Either way, it is pretty bad. The recent decline in their quality control is pretty serious.

The iPhone bug: Is Apple getting too rich and too lazy?
www.latimes.com

... But certainly some recent bugs have been serious. An OS X upgrade not long ago completely destroyed the functionality of the Mac's invaluable Time Machine backup program; Apple seemed completely at sea for weeks about how to fix it.

... But an incompetent Apple? It wasn't long ago that the very idea was held only by paranoids ...
Geek4414 (12000)
1368478 2014-02-24 23:12:00 from a link in a link above....
mashable.com

This is interesting. In 2013 NZ authorites made 71 device info requests(to Apple), 41% requests were rejected by Apple.
I have to wonder why/what/how those requests were rejected, Apple obviously didnt think those rejected requests had merit.

Apple rejected 2 out of 3 a/c info requests from NZ authorites
Were NZ authorities asking for info they had no good reason to have ??
tinfoil hat time ?
can we get any further off topic ?
:p

Apples latest "security flaw": Patched within 1 week on mobiles etc. Acceptable or not ? Some Manufacturers/SoftwareCompanies ignore(deny) such things for 6 months +++
Mac Desktops etc not yet patched for this , whats the reason for that ?? Acceptable/reasonable delay or not ??
1101 (13337)
1 2 3 4 5 6 7 8 9