2 ms·
It's not just an "iOS" flaw. It's a "latest, greatest Apple OS" flaw. And anyone who given a choice between SSL and TLS relies on TLS is not putting security
by gwu78 13y ago
It's not just an "iOS" flaw. It's a "latest, greatest Apple OS" flaw.
And anyone who given a choice between SSL and TLS relies on TLS is not putting security as a top priority.
And why would anyone who cares even the slightest about security use Flash? Are you serious?
I guess this is why security consulting could be easy money... clients want to use Flash and "stay secure". Yeah, sure, we can handle that for you.
Well, now you cannot even use a Mac without the potential for HTTPS authentication not working. Better make sure the OS is updated. Sounds a lot like Microsoft. Maybe you could start a business updating Mac OS's.
"Does anyone know what's going on inside Apple?"
If they did they couldn't say. All employees are sworn to secrecy.
I blackhole all traffic from Apple devices to *.apple.com
You would not believe (or maybe you would, if you are a "security consultant" or some such)... you would not believe the amount of "phoning home" that these devices do.
I agree you can't trust "security consultants" who do their marketing via blogs and forums.
But you surely cannot trust Apple either.
The flaw was one line of code.
I'm curious. What is the size on the update?
Imagine if you could make the change yourself, recompile and dd an image to your device.