4 ms·
>Early iterations of the iPhone notoriously lied about the security of SSL connections to email servers; my understanding is that this led to them being banned
by Jerry2 11y ago
>Early iterations of the iPhone notoriously lied about the security of SSL connections to email servers; my understanding is that this led to them being banned from some corporate and government accounts for a few years.
What? Never heard about this. Is he bullshitting about this or is there some validity behind this claim?
- bendbro 11y agoI found a number of articles referencing this IOS 4.2 SSL vulnerability. http://www.peterbance.co.uk/information-security-articles/ssl-vulnerability-in-apple-ios/ http://www.peterbance.co.uk/information-security-articles/ss... It's somewhat difficult to find the event on Google due to results of the search being masked by the last IOS "goto fail" SSL vulnerability. http://arstechnica.com/security/2015/04/critical-https-bug-may-open-25000-ios-apps-to-eavesdropping-attacks/ http://arstechnica.com/security/2015/04/critical-https-bug-m... While I'd imagine this is open to some interpretation, IOS is the least secure mobile OS, at least in terms of the number of vulnerabilities it has. It is not worth believing it is immume from the same failings of other OSes. http://venturebeat.com/2015/12/31/software-with-the-most-vulnerabilities-in-2015-mac-os-x-ios-and-flash/ http://venturebeat.com/2015/12/31/software-with-the-most-vul...
- Jerry2 11y agoNone of those links address the claim about SSL and email. And iOS4 is not an "early" iPhone.
- bendbro 11y agoI wanted to come back and say I was too quick to judge on the vulnerability article. This data doesn't indicate whether bugs were found and patched internally, or were actually exposed first by malware.