[4581] in Privacy_Forum
[ PRIVACY Forum ] Apple's 'Gotofail' Security Mess Extends To Mail,
daemon@ATHENA.MIT.EDU (PRIVACY Forum mailing list)
Sun Feb 23 21:54:17 2014
Date: Sun, 23 Feb 2014 18:08:50 -0800
To: privacy-list@vortex.com
Message-ID: <20140224020850.GD15164@vortex.com>
MIME-Version: 1.0
Content-Disposition: inline
From: PRIVACY Forum mailing list <privacy@vortex.com>
Reply-To: PRIVACY Forum mailing list <privacy@vortex.com>
Content-Type: text/plain; charset="iso-8859-1"
Errors-To: privacy-bounces+privacy-forum=mit.edu@vortex.com
Content-Transfer-Encoding: 8bit
Apple's 'Gotofail' Security Mess Extends To Mail, Twitter, iMessage,
Facetime And More
http://j.mp/1hITWaQ (Forbes)
First, Apple revealed a critical bug in its implementation of
encryption in iOS, requiring an emergency patch. Then researchers
found the same bug is also included in Apple's desktop OSX operating
system, a gaping Web security hole that leaves users of Safari at risk
of having their traffic hijacked. Now one researcher has found
evidence that the bug extends beyond Apple's browser to other
applications including Mail, Twitter, Facetime, iMessage and even
Apple's software update mechanism. On Sunday, privacy researcher
Ashkan Soltani posted a list of OSX applications on Twitter that he
says he's determined use Apple's "secure transport" framework, the
coding library that developers depend on to build programs that
securely communicate online using the common encryption protocols TLS
and SSL. The full list, which isn't comprehensive given that Soltani
only analyzed the programs on his own PC, is shown below. (Soltani has
underlined the vulnerable application names in red.)
- - -
--Lauren--
Lauren Weinstein (lauren@vortex.com): http://www.vortex.com/lauren
Co-Founder: People For Internet Responsibility: http://www.pfir.org/pfir-info
Founder:
- Network Neutrality Squad: http://www.nnsquad.org
- PRIVACY Forum: http://www.vortex.com/privacy-info
Member: ACM Committee on Computers and Public Policy
Lauren's Blog: http://lauren.vortex.com
Google+: http://google.com/+LaurenWeinstein
Twitter: http://twitter.com/laurenweinstein
Tel: +1 (818) 225-2800 / Skype: vortex.com
_______________________________________________
privacy mailing list
http://lists.vortex.com/mailman/listinfo/privacy
