Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Search Articles

Huge security issues with Mac OS X and iOS

Feb 22 2014 11:04 PM | waves in Uncategorized

The security is so bad I advised everyone who is running ios 6.x to 6.1.5 or 7.x - 7.0.5 to update quick.

As with Mac OS X 10.9.x I would not reccomend using it.

Basically: HTTPS does not work on MAC OSX and iOS < 7.0.6. Your passwords and credit card creds can be intercepted on networks.

The short story:

For over a year HTTPS has been unsecured on iOS 6.0 - to 7.0.5. Apple has patched the issue on 6.1.6 and 7.0.6. The bug is not present in 5.1.1. The bug is currently, still present in Mac OS 10.9.x Mavericks as is currently not fixed.

If you are saying, well what is the big deal, the issue has been there for a year, well now it is public knowledge. Your credit card information, passwords, etc, are no longer safe.

I highly reccomend everyone updating iOS, if it is not on 5.1.1 or lower.

For older devices unable to run iOS 7 your fix is 6.1.6 if you are on iOS 7 - your fix is 7.0.6.

Unfortunantly if you hate iOS 7 and you are still on iOS 6.x and your device is iOS 7, you will be forced to update, as you will be unable to download iOS 6.1.6.

If you are Mac OS X Mavericks, I do not reccomend using it, at all, until a fix is ready, or downgrade to Snow Leopard etc.

Alternatively, A third party patch for Mac OS X, which I cannot vouch for, is available from i0n1c. (Though I assume it safe).

Users can check whether or not their computers are affected by the vulnerability by visiting gotofail.com in Safari.

Long story can be found here:

https://www.imperial...2/applebug.html and http://247wallst.com...-security-flaw/

The Good news:

If jailbreaking is your thing, iOS 7.0.6 and iOS 6.1.6 can still be jailbroken.

21 Comments

awags0218
Feb 24 2014 01:35 AM

Does this only affect Safari users or am i safe with Firefox? Or is it the OS alone?

waves
Feb 24 2014 06:08 PM

It should not effect Firefox or Chrome. However, the bug is present in Applications such as, Mail, iMessage, iCal etc.

https://mobile.twitt...een_name=ashk4n

Keep in mind this seems to be only in Mac OS X 10.9.x (and as of today in the latest beta build).

awags0218
Feb 24 2014 07:42 PM

Is it safer not to browse altogether or revert to Snow leopard as a last resort? Apple has a history of being late in their updates. Should we just wait it out?

waves
Feb 25 2014 03:02 PM

It is not just browsing, unfortunately.

But if it is me, I would change to Snow Leopard or something. Or just use Windows via bootcamp, until a fix comes out.

If I had to use Mavericks, and could not use bootcamp, I would just likely apply the unofficial patch from @ i0n1c. Now, I am sure some people, would be paranoid and not want to apply an unofficial patch, and I can understand that.

awags0218
Feb 25 2014 03:37 PM

Thanks, i was wondering if you knew if my mid 2012 Mac book Pro 13in was capable of downgrading to SL (snow leopard) it came with lion 10.7 pre installed .

Processor  2.9 GHz Intel Core i7
Memory  8 GB 1600 MHz DDR3
Graphics  Intel HD Graphics 4000 1024 MB
Software  OS X 10.9.1 (13B42)

waves
Feb 25 2014 09:55 PM

Yeah, you could.

Fix is live for Mavericks now.

awags0218
Feb 26 2014 02:30 AM

Tried Downgrading with an old backup copy of SL, and it just says ...

"You canâ€™t use this version of the application â€œInstall Mac OS X.appâ€ with this version of OS X."You have â€œInstall Mac OS X.appâ€ 23.1.

I imagine the old OS doesn't support the newer drivers, since the newer models have them burnt in.

Reboot
Feb 26 2014 03:00 AM

awags0218, on 26 February 2014 - 02:30 AM, said:

"You canâ€™t use this version of the application â€œInstall Mac OS X.appâ€ with this version of OS X."You have â€œInstall Mac OS X.appâ€ 23.1.

Are you using SL disc? Try boot SL installer disc by holding C button at startup. I am sure it will works.

awags0218
Feb 26 2014 06:19 PM

I will give it a try. Thanks for the information "Waves" and "Reboot".

daviida
Feb 27 2014 08:11 AM

An huge software update went today from Apple 850 Mb... to 10.9.2

Dresden34
Mar 02 2014 05:39 PM

I haven't had any problems with my computer since I got it. Everything seems to be going well.

chrisangel
Mar 06 2014 01:02 PM

Good for you, but the bug still existed.

SuicideSamurai
Mar 08 2014 12:37 PM

The bug apparently has been fixed with the latest update

Free 4 Live
Apr 27 2014 09:11 PM

For jailbroken iOS <= 6.1.3:

add repo: 'http://yangapp.googlecode.com/svn/' (be sure to enter the HOLE link, also delete 'http://' that is already there when adding a new source!{don't know why, but it won't work in another way})

after that, install "SSL Patch" from that source and you're good to go, and should be safe again!

ThetaSigma
Apr 29 2014 03:23 PM

Apple released a security update for Mavericks, I assume this solves the issues here.

CSxDeity
May 10 2014 02:23 PM

Hmm interesting.

victorzimmer
Jun 27 2014 08:25 AM

Bug is not present in 10.10 (Yosemite)

David Tylor
May 03 2019 07:39 AM

Top Quality Cheap Assignment Help Services
Need Assignment Help?

We provide customized assignment help service. During higher studies in colleges, students often have to prepare multiple documents, quizzes, and surprise tests. This is the main reason why most students search for nursing assignment help and C# Programming Assignment Help over the internet and choose only the most proficient and trusted academic writing experts. Writing academic documents is a task most students prefer to leave up to the subject matter experts. This is because most of them are complex and comprehensive, the research for which consumes a large portion of their valuable time.

adamschule85
Nov 12 2019 05:59 AM

Don’t know why Unable to subscribe to it. Is there anyone getting identical rss problem? minesweeper online

lindarose
Mar 31 2020 03:13 AM

It's very good post which I really enjoyed reading. It is not everyday that I have the possibility to see something like this.
cannon basketball 3 redball5.net