Thursday, February 27, 2014

iFruit OS X 10.9.2 Update


Apple has released OS X 10.9.2 update for all Maverick users, which, amongst other things patches the SSL bug in the operating system that could allow full transparent interception of HTTPS traffic.

This vulnerability not only affected Safari, but also other installed applications relying on an encrypted channel to the internet. However, third-party browsers such as Chrome and Firefox rely on different implementations of SSL/TLS, which means that they aren’t subject to the vulnerability.
The bug, which has apparently gone unpatched since iOS 6's release in 2012, resides in a piece of open source code used by Apple.

No comments:

Post a Comment