Recently Apple Inc released software patches and update for the current
versions of iOS for iPhone 4 and newer versions, iPad 2 and later, and
the fifth generation iPod touch. A major flaw in Apple devices could allow hackers to intercept email and other communications that are meant to be encrypted, the company says.
"Without the fix, a hacker could impersonate a protected site and sit in the middle as email or financial data goes between the user and the real site" Matthew Green said.
"Apple pushed a rather spooky security update for iOS that suggested that something was horribly wrong with SSL/TLS in iOS but gave no details." Adam Langley, Google engineer said.
After analyzing the patch, several security researchers said the same
flaw existed in current versions of Mac OSX, running Apple laptop and
desktop computers. There is no patch released for Mac OSX still now.
'We are aware of this issue and already have a software fix that will be released very soon.' Trudy Muller, Apple spokesman said.
The issue is a "fundamental bug in Apple's SSL implementation,"
said Dmitri Alperovich, chief technology officer at security firm
CrowdStrike Inc. Adam Langley, a senior engineer at Google, agreed with
CrowdStrike that OS X was at risk.
Apple did not reply to requests for comment. The flaw appears to be in
the way that well-understood protocols were implemented, an embarrassing
lapse for a company of Apple's stature and technical prowess.
(With inputs from Reuters)
0 comments:
Post a Comment