The Wiert Corner – irregular stream of stuff

Jeroen W. Pluimers on .NET, C#, Delphi, databases, and personal interests

  • My badges

  • Twitter Updates

  • My Flickr Stream

  • Pages

  • All categories

  • Enter your email address to subscribe to this blog and receive notifications of new posts by email.

    Join 2,387 other followers

When using Apple Hardware, be prepared for security updates. iOS already there, OS X and others will follow. #gotofail

Posted by jpluimers on 2014/02/24

Last week, Apple fixed the so called #gotofail bug for iOS devices. Other devices (Macs with OS X 10.9 Mavericks, maybe earlier versions and I also suspect Apple TV to be vulnerable) will follow soon.

I thought that Old iOS devices would be in the dark as the updates are for iOS 6.x and 7.x only. So any device that can only run on iOS 5 or lower might not be supported.

So I thought these devices would be unsupported, but found out an iPad 1st generation would pass the gotofail.com test.

So if you have any of these, please let me know if they fail or pass:

  • iPhone 3 or earlier,
  • iPod Touch 3rd generation or earlier,
  • iPad 1st generation: passes.

Please watch any security announcements carefully with using Apple equipment, as the bug can highly facilitate a man-in-the-middle attack.

Some other site with background information (it hit the news wildly):

The cause is some unreachable code because of the combination of a copy/paste failure, and the absence of curly braces around single-statement then/else blocks as explained for instance by ImperialViolet – Apple’s SSL/TLS bug.

Of course, jokes could not stay out for long, like the T-Shirt on the right (and many others) and the conspiracy about Apple and NSA.

But also practical tips:

Edit: indeed, iOS releases in the 6.x and 7.x trees were vulnerable including Apple TV:

–jeroen

One Response to “When using Apple Hardware, be prepared for security updates. iOS already there, OS X and others will follow. #gotofail”

  1. […] When using Apple Hardware, be prepared for security updates. iOS already there, OS X and others will… […]

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

This site uses Akismet to reduce spam. Learn how your comment data is processed.

 
%d bloggers like this: