Path: csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!feeder.erje.net!eu.feeder.erje.net!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From: Jolly Roger <jollyroger@pobox.com>
Newsgroups: comp.sys.mac.system
Subject: Re: Latest IOS/OS X SSL security flaw
Date: 26 Feb 2014 04:19:46 GMT
Organization: People for the Ethical Treatment of Pirates
Lines: 50
Message-ID: <bn58b2FhkarU2@mid.individual.net>
References: <lears8$l8d$1@dont-email.me> <220220141415089899%nospam@nospam.invalid> <2NWdnQXy6oxRY5XOnZ2dnUVZ_qSdnZ2d@giganews.com> <bmsj7oFmdpqU4@mid.individual.net> <L-SdnavB-Z27ppTOnZ2dnUVZ_uKdnZ2d@giganews.com> <bmsu50Fnr6sU2@mid.individual.net> <led5e1$4q9$1@dont-email.me> <juidnXCqaaIYvZfOnZ2dnUVZ_rCdnZ2d@giganews.com> <ledurc$p6s$1@dont-email.me> <ItGdnd5-bfmfB5fOnZ2dnUVZ_qmdnZ2d@giganews.com> <slrnlgli63.fcb.g.kreme@amelia.local> <bn026nFe8lqU1@mid.individual.net> <slrnlglo0i.fcb.g.kreme@amelia.local> <bn1988Fmd88U1@mid.individual.net> <_dadnQGhF7aH45bOnZ2dnUVZ_t2dnZ2d@earthlink.com> <wwvy50znwbn.fsf@l1AntVDjLrnP7Td3DQJ8ynzIq3lJMueXf87AxnpFoA.invalid> <p98vta-au71.ln1@news.chingola.ch> <bn4gf6FcrkaU6@mid.individual.net> <lej8mh$bs5$2@dont-email.me> <bn52dbFgm4aU1@mid.individual.net> <lejliq$ai1$1@dont-email.me>
X-Trace: individual.net 6hrJz0wvjp+Qj/FHriW58w6defMaEEXYVqg5rQF6WyLCm2JNep
Cancel-Lock: sha1:Yq6JCHmuMWdPXEjP8o6mXip84zY=
X-Face: _.g>n!a$f3/H3jA]>9pN55*5<`}Tud57>1<n@LQ!aZ7vLO_nWbK~@T'XIS0,oAJcU.qLM dk/j8Udo?O"o9B9Jyx+ez2:B<nx(k3EdHnTvB]'eoVaR495,Rv~/vPa[e^JI+^h5Zk*i`Q;ezqDW< ZFs6kmAJWZjOH\8[$$7jm,Ogw3C_%QM'|H6nygNGhhl+@}n30Nz(^vWo@h>Y%b|b-Y~()~\t,LZ3e up1/bO{=-)
User-Agent: slrn/1.0.1 (Darwin)
Xref: csiph.com comp.sys.mac.system:57118

On 2014-02-26, Ted Lee <tmplee@gmail.com> wrote:
> On 2/25/14, 8:38 PM, Jolly Roger wrote:
>> On 2014-02-25, Ted Lee <tmplee@gmail.com> wrote:
>>> On 2/25/14, 3:32 PM, Jolly Roger wrote:
>>>> BTW, the Mac OS X update is available now.
>>> No fix for the wifi/bluetooth problem, it would seem.  It does claim
>>> some fixes to gmail/Mailapp problems.
>> "The" WiFi/Bluetooth problem? I don't have any problems at all with
>> either one. Maybe it's not as wide spread as you seem to think?
>>
> Go check the support community discussions.  It appears to be quite 
> common with certain hardware (If I remember right, recent laptops) and 
> Mavericks -- if bluetooth is on, wifi won't reconnect well, if at all, 
> after waking from sleep.  It certainly was a problem with mine.  I don't 
> use bluetooth much, but I did once and accidentally left it on -- 
> thereafter, not that I was aware of the "thereafter" at the time, I had 
> that problem with my wifi until I turned the bluetooth off, after having 
> stumbled across a discussion about it.
>
> Having said that, I just tried turning on bluetooth after installing the 
> update and could not make the misbehavior happen, so possibly they did 
> fix it.
>>> Nor does either the update info or the link to security update info say
>>> anything that implies the SSL flaw has been fixed!  At least I couldn't
>>> find it.
>>
>> Yes it does:
>>
>> <http://support.apple.com/kb/HT6150>
>>
> Thanks.  Where did you find that link?  

Since I am subscribed to the apple security announcements mail list, I
got a message this morning announcing the release. The message gave an
exhaustive list of all of the updated packages, along with a link to
<http://support.apple.com/kb/HT1222>.

> The one with the update, http://support.apple.com/kb/HT1222, and
> anything referenced in it that I followed, has no details and doesn't
> even list an update for any 10.9.  security issues.

It's the very first item at the top of the "Security updates" list:

<http://imageshack.com/a/img716/1199/580s.png>

-- 
E-mail sent to this address may be devoured by my ravenous SPAM filter.
I often ignore posts from Google. Use a real news client instead.

JR