Apple Finally Patches Its 'Gotofail' Security Bug for OSX
Forbes reports today that "After a very long four days of snowballing criticism by the security community, Apple has fixed the critical security flaw in its software dubbed "gotofail," which threatened to allow any untrusted network to disable the encryption on users' communications."
Forbes further notes that "The patch, released for OSX Tuesday, follows a similar update for iOS last Friday that first alerted security researchers to the bug. That earlier patch was quickly reverse engineered to reveal the source of the flaw–as well as the fact that the vulnerability existed in Apple's desktop software as well, with no patch available.
Apple has issued fixes for a security flaw in its Macintosh computers that allows hackers to intercept data such as email, patching a major and embarrassing glitch that came to light several days ago.
The flaw allowed attackers with access to a mobile user's network, such as a shared unsecured wireless service offered by a cafe, to see or alter exchanges between the user and protected sites such as Google Inc's Gmail or Facebook."
Apple's security webpage states that "For the protection of our customers, Apple does not disclose, discuss or confirm security issues until a full investigation has occurred and any necessary patches or releases are available."
For detailed information about Apple's new updates, go to the two Apple webpages as noted here: Update site #1, and Update site #2
About Making Comments on our Site: Patently Apple reserves the right to post, dismiss or edit any comments.
Comments