MacResource
Security Fix for OSX- a problem? - Printable Version

+- MacResource (https://forums.macresource.com)
+-- Forum: My Category (https://forums.macresource.com/forumdisplay.php?fid=1)
+--- Forum: Tips and Deals (https://forums.macresource.com/forumdisplay.php?fid=3)
+--- Thread: Security Fix for OSX- a problem? (/showthread.php?tid=164462)



Security Fix for OSX- a problem? - pipiens - 02-25-2014

No fix yet. Need we worry?

Lloyd Chambers on the website Mac Performance Guide thinks so.
http://macperformanceguide.com/

He also has his knickers in a twist about the current state of Mac software.
http://macperformanceguide.com/AppleCoreRot-intro.html

His site is mainly devoted to getting the most bang for your buck configuring Macs and peripherals for photographers.


Re: Security Fix for OSX- a problem? - Catzilla - 02-25-2014

THE SKY IS FALLING!

"This kind of flaw makes the Target fiasco look like a minor spat in a kiddie sandbox: the effects of a TSL/SSL compromise in Apple iOS and OS X are worldwide and could be devastating if exploited properly by opportunistic hackers. What is Apple’s liability if something happens, e.g., access to Citbank, Chase, Schwab, and similar financial sites?"

The iOS flaw has been patched and if I understand it correctly it's a "man in the middle" attack vulnerability, which would affect mostly iOS devices.


Re: Security Fix for OSX- a problem? - ka jowct - 02-25-2014

It appears to be limited to Mavericks so far, in which case I'm safe. But I agree that this should have been patched already, and that a lapse such as this should not have occurred at all. Apple IS screwing up their software. Let's not kid ourselves. And they can afford to be better than that.


Re: Security Fix for OSX- a problem? - sekker - 02-25-2014

ka jowct wrote:
It appears to be limited to Mavericks so far, in which case I'm safe. But I agree that this should have been patched already, and that a lapse such as this should not have occurred at all. Apple IS screwing up their software. Let's not kid ourselves. And they can afford to be better than that.

I really do not understand how Apple cannot afford a dedicated Mac support team.


Re: Security Fix for OSX- a problem? - gabester - 02-25-2014

sekker wrote:
[quote=ka jowct]
It appears to be limited to Mavericks so far, in which case I'm safe. But I agree that this should have been patched already, and that a lapse such as this should not have occurred at all. Apple IS screwing up their software. Let's not kid ourselves. And they can afford to be better than that.

I really do not understand how Apple cannot afford a dedicated Mac support team.
That would cut into their profits... It's pretty clear and simple. Macs = 2nd class citizens at Apple, Inc.


Re: Security Fix for OSX- a problem? - pipiens - 02-25-2014

Chrome and Firefox seem to be OK
http://www.macworld.co.uk/news/mac/mac-users-warned-against-using-public-wi-fi-networks-3503868/


Re: Security Fix for OSX- a problem? - clay - 02-25-2014

10.9.2 is out and fixes the issue.


Re: Security Fix for OSX- a problem? - PeterW - 02-25-2014

A present from the nonexistent dedicated Mac support team to all those 2nd class citizens...


Re: Security Fix for OSX- a problem? - haikuman - 02-26-2014

This seems to be a Mavericks issue right ?

http://www.usatoday.com/story/tech/2014/02/25/apple-mavericks-os-x-security-fix/5819381/

Apple releases security update for Mac OS X Mavericks

Apple on Tuesday released a security update for Mac OS X Mavericks fixing a major security issue first discovered late last week.

According to notes posted on the company's website the security flaw would have allowed "an attacker with a privileged network position" to "intercept user credentials or other sensitive information" when users were using the Mail and Safari apps and iCloud service.




http://www.reuters.com/article/2014/02/25/us-apple-security-idUSBREA1O1Q820140225