{"id":1283,"date":"2014-02-24T09:49:52","date_gmt":"2014-02-24T15:49:52","guid":{"rendered":"https:\/\/sodpit.com\/?p=1283"},"modified":"2014-02-26T19:27:31","modified_gmt":"2014-02-27T01:27:31","slug":"goto-fail-major-security-flaw-in-apple-ios-and-osx","status":"publish","type":"post","link":"https:\/\/sodpit.com\/?p=1283","title":{"rendered":"goto fail; Major Security Flaw in Apple iOS and OSX"},"content":{"rendered":"

\"\"<\/a><\/p>\n

If you are an Apple user, stop what you are doing right now, disconnect from WiFi, and take 5 minutes to read everything on this page.<\/span><\/p>\n

I read several articles yesterday about a serious security flaw in Apple’s iOS (iPhone, iPad, etc.) and OSX (Mac) that has existed since September… of 2012. Internally Apple has been well aware of this problem for almost a year and a half (17 months), yet for some reason (shocker) they chose not to disclose this flaw publicly… so most users never knew there was a problem.<\/p>\n

The flaw allows a hacker to intercept all of your data even though you might see a secure link (padlock) icon which means SSL (Secure Socket Layer) is enabled. This flaw can normally only be exploited when you (and a hacker) are on a public WiFi hotspot and it only affects iOS 6.0 through 7.0.5 on iPhones and Macs running OSX. There is a fix for iOS but currently there is no fix for Mac OSX.<\/p>\n

Let’s just hope<\/del>\u00a0pray you haven’t been checking your bank account at Starbucks or Facebooking at McDonald’s.<\/p>\n

iPhone users: until the iOS 7.0.6 update is installed please do NOT use WiFi in any public places.<\/p>\n

Mac users: avoid using publicly accessible WiFi until Apple releases an update.<\/p>\n

Go to your iPhone\/iPad and open Settings > General > About. Scroll down to see your device’s version information. If your device is running anything between 6.0 and 7.0.5 you need to upgrade to 7.0.6 NOW. To upgrade, connect to your personal or trusted WiFi hotspot (only use WiFi at your house or work) and open Settings > General. You should see an available upgrade. Install it immediately.<\/span><\/p>\n

Please send a link to this page (using either of the two links below) to friends and family who might be using Apple products:<\/span><\/p>\n

https:\/\/sodpit.com\/2014\/02\/24\/goto-fail-major-security-flaw-in-apple-ios-and-osx\/<\/a><\/p>\n

http:\/\/j.mp\/OtJHKI<\/a><\/p>\n

Update #1 – 2\/24\/14 – Mostly for OSX users:<\/p>\n

Apple quietly issues iOS update to patch faulty SSL authentication (update 2: OS X patch coming)<\/a><\/p>\n

Protect a Mac from the \u2018GotoFail\u2019 SSL \/ TLS security bug (until fix arrives)<\/span><\/a><\/p>\n

Help Protect a Mac from the SSL \/ TLS Security Bug (Until a Fix Arrives)<\/span><\/a><\/p>\n

Hint… the next two links should be clicked from your Mac: Use Mozilla Firefox for OSX<\/a>\u00a0or Google Chrome for OSX<\/a>\u00a0until an OSX patch is released.<\/span><\/p>\n

Update #2 – 2\/26\/14: Mac OSX Patch Finally Available!<\/p>\n

OSX Mavericks 10.9.2 Upgrade<\/a><\/p>\n

Apple releases OS X 10.9.2 update, patches severe SSL bug<\/a><\/p>\n

About the security content of OS X Mavericks v10.9.2 and Security Update 2014-001<\/a><\/p>\n

Resources:<\/span><\/p>\n

Why Apple’s Recent Security Flaw Is So Scary<\/a><\/p>\n

Apple Security Flaw Is \u201cAs Bad As You Could Imagine\u201d<\/a><\/p>\n

Extremely critical crypto flaw in iOS may also affect fully patched Macs<\/a><\/p>\n

More…<\/a><\/p>\n

goto fail;<\/p>\n

A sample of the code showing where the problem occurred.<\/p>\n

fail:<\/p>\n

\"\"<\/a><\/p>\n

The second instance of “goto fail;” (above) is what caused the flaw. Supposedly it was accidentally copy\/pasted before the OS was released.<\/p>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

If you are an Apple user, stop what you are doing right now, disconnect from WiFi, and take 5 minutes to read everything on this page. I read several articles yesterday about a serious security flaw in Apple’s iOS (iPhone, iPad, etc.) and OSX (Mac) that has existed since September… of 2012. Internally Apple has … Continue reading goto fail; Major Security Flaw in Apple iOS and OSX<\/span> →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":1286,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","enabled":false},"version":2}},"categories":[4],"tags":[14,10],"class_list":["post-1283","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-main","tag-apple","tag-featured"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"https:\/\/sodpit.com\/wp-content\/uploads\/2014\/02\/1580169x.jpg","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p2FmUa-kH","jetpack_likes_enabled":false,"_links":{"self":[{"href":"https:\/\/sodpit.com\/index.php?rest_route=\/wp\/v2\/posts\/1283","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sodpit.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sodpit.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sodpit.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/sodpit.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1283"}],"version-history":[{"count":5,"href":"https:\/\/sodpit.com\/index.php?rest_route=\/wp\/v2\/posts\/1283\/revisions"}],"predecessor-version":[{"id":1299,"href":"https:\/\/sodpit.com\/index.php?rest_route=\/wp\/v2\/posts\/1283\/revisions\/1299"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/sodpit.com\/index.php?rest_route=\/wp\/v2\/media\/1286"}],"wp:attachment":[{"href":"https:\/\/sodpit.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1283"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sodpit.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1283"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sodpit.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1283"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}