Huge security flaw affects (nearly) all iPhones, iPads, and Apple computers

NUTZZ

From Journal.ie

This huge security flaw affects (nearly) all iPhones, iPads, and Apple computers

A SOFTWARE BUG called “Gotofail” currently affects every single Apple device, whether it’s an iPhone, iPad, or desktop or laptop computer.
If you own of these devices, but have not updated it in the last few days, it is currently vulnerable.

Apple revealed that the security flaw in its iOS operating system for iPhone and iPad affects encryption.
That’s how data gets sent over the Internet without you having to worry about people reading your emails or stealing your credit card number when you buy something from Amazon.

“Gotofail”
The name “Gotofail” is a reference to the “goto” computer command.
A fix recently went out to iOS customers that renders this bug a non-issue, so if you haven’t updated your iPhone or iPad’s software recently, be sure to do so.

There’s a full guide right here, but you’ll want to plug your phone in as of you’re charging it, open the Settings app, select “General”, then “Software Update”, and follow the instructions that appear.
OS X users are still waiting for a fix.
Official word from Apple is that it will come “very soon.”

Hacker
Gotofail directly affects OS X apps. Any hacker monitoring them would find a goldmine of data if they wanted it. Major communication apps like Apple’s email client and iMessage are vulnerable, even the Safari web browser.

This bug tricks your computer into thinking that it’s communicating with safe, highly trusted servers on the Internet even if those servers are being used by hackers to monitor and alter the data you send and receive online, even if it’s encrypted

Apple is generally the company that can be looked at to take care of stuff like this for us, but the way that Apple computers run right now leave them less than totally safe.
OS X users who want to protect themselves until Apple issues an official fix: the very least you can do is stop using Safari if you weren’t already using something else.
Try Firefox or Chrome for your web browsing needs and you’ll be able tocontinue making those Amazon purchases without worry.

Zcott

Patched in the recent iOS 7.0.6 and Mac OS 10.9.2 updates.

NUTZZ

Zcott wrote: »

Patched in the recent iOS 7.0.6 and Mac OS 10.9.2 updates.

Yeh the article mentioned iOS had been patched already, OS X 10.9.2 was just released a few hours ago;

Apple has just released OS X version 10.9.2 to the public.

While the release notes don’t specifically mention it, AppleInsider reported yesterday that the new software does indeed fix the nasty SSL exploit that was also patched in iOS last week with an update.

The new software update also contains a number of improvements including FaceTime Audio support and the ability to block iMessages from specific senders just like in iOS.

Here’s a list of the other changes mentioned in the release notes:

Improves the accuracy of unread counts in Mail
Resolves an issue that prevented Mail from receiving new messages from certain providers
Improves AutoFill compatibility in Safari
Fixes an issue that may cause audio distortion on certain Macs
Improves reliability when connecting to a file server using SMB2
Fixes an issue that may cause VPN connections to disconnect
Improves VoiceOver navigation in Mail and Finder