Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.sys.mac.system > #70520 > unrolled thread

Old crypto weakness in current OS X, iOS, (and Android ...)

Back to article view | Back to comp.sys.mac.system

Contents

  Old crypto weakness in current OS X, iOS, (and Android ...) Alan Browne <alan.browne@FreelunchVideotron.ca> - 2015-03-05 11:28 -0500
    Re: Old crypto weakness in current OS X, iOS, (and Android ...) Bert <bert@iphouse.com> - 2015-03-05 16:37 +0000
      Re: Old crypto weakness in current OS X, iOS, (and Android ...) Alan Baker <alangbaker@telus.net> - 2015-03-05 09:39 -0800
        Re: Old crypto weakness in current OS X, iOS, (and Android ...) Barry Margolin <barmar@alum.mit.edu> - 2015-03-05 13:07 -0500
          Re: Old crypto weakness in current OS X, iOS, (and Android ...) Alan Baker <alangbaker@telus.net> - 2015-03-05 10:52 -0800
        Re: Old crypto weakness in current OS X, iOS, (and Android ...) Michelle Steiner <michelle@michelle.org> - 2015-03-05 11:44 -0700
          Re: Old crypto weakness in current OS X, iOS, (and Android ...) tmo1138 <tmo1138@tmo1138.com> - 2015-03-06 02:05 +0000
        Re: Old crypto weakness in current OS X, iOS, (and Android ...) Bert <bert@iphouse.com> - 2015-03-06 21:41 +0000
          Re: Old crypto weakness in current OS X, iOS, (and Android ...) nospam <nospam@nospam.invalid> - 2015-03-06 16:57 -0500
            Re: Old crypto weakness in current OS X, iOS, (and Android ...) Alan Browne <alan.browne@FreelunchVideotron.ca> - 2015-03-06 17:18 -0500
              Re: Old crypto weakness in current OS X, iOS, (and Android ...) nospam <nospam@nospam.invalid> - 2015-03-06 17:21 -0500
                Re: Old crypto weakness in current OS X, iOS, (and Android ...) Alan Browne <alan.browne@FreelunchVideotron.ca> - 2015-03-06 17:29 -0500
                  Re: Old crypto weakness in current OS X, iOS, (and Android ...) nospam <nospam@nospam.invalid> - 2015-03-06 17:46 -0500
                Re: Old crypto weakness in current OS X, iOS, (and Android ...) Bert <bert@iphouse.com> - 2015-03-07 15:23 +0000
              Re: Old crypto weakness in current OS X, iOS, (and Android ...) dempson@actrix.gen.nz (David Empson) - 2015-03-07 12:08 +1300
                Re: Old crypto weakness in current OS X, iOS, (and Android ...) Alan Browne <alan.browne@FreelunchVideotron.ca> - 2015-03-06 18:11 -0500
              Re: Old crypto weakness in current OS X, iOS, (and Android ...) Alan Baker <alangbaker@telus.net> - 2015-03-06 17:51 -0800
            Re: Old crypto weakness in current OS X, iOS, (and Android ...) Kevin McMurtrie <mcmurtrie@pixelmemory.us> - 2015-03-06 20:14 -0800
          Re: Old crypto weakness in current OS X, iOS, (and Android ...) Lewis <g.kreme@gmail.com.dontsendmecopies> - 2015-03-06 23:14 +0000
            Re: Old crypto weakness in current OS X, iOS, (and Android ...) nospam <nospam@nospam.invalid> - 2015-03-06 18:20 -0500
          Re: Old crypto weakness in current OS X, iOS, (and Android ...) Michelle Steiner <michelle@michelle.org> - 2015-03-06 17:37 -0700
    Re: Old crypto weakness in current OS X, iOS, (and Android ...) Fred Moore <fmoore@gcfn.org> - 2015-03-05 12:22 -0500
    Re: Old crypto weakness in current OS X, iOS, (and Android ...) billy@MIX.COM - 2015-03-05 19:31 +0000

Page 2 of 2 — ← Prev page 1 [2]

#70593

In article <XnsA455DCBF57888VeebleFetzer@127.0.0.1>, Bert
<bert@iphouse.com> wrote:

> Well, I was talking about Google and its pet Android, but just how long
> DOES Apple keep providing updates to its phones? 

iOS 8 will work on the iPhone 4S and later.  The 4S was released in
October 2011.  I'll leave the math up to you.

[toc] | [prev] | [next] | [standalone]

#70527

On 3/5/15 11:28 a, Alan Browne wrote:
> QUOTE (From NYT)
> A government policy that forbade the export of products with strong
> encryption in the 1990s has years later left users of devices like
> Android and Apple phones vulnerable to hackers when they visit one-third
> of all websites, including whitehouse.gov and nsa.gov.
>
> Researchers last month discovered millions of devices and websites were
> using an outdated encryption key to secure their communications. The
> weak key resulted from a Clinton administration mandate that software
> and hardware makers use weak cryptography in products exported outside
> the United States.
> END QUOTE
>
> QUOTE
> Apple said on Wednesday it would patch the vulnerability through
> software updates for its mobile operating system, iOS, and its Macintosh
> operating system, OS X, next week. Google said it had developed a patch
> to protect Android connections to websites and provided the patch to
> Android manufacturers. BlackBerry and Amazon, whose products are also
> affected by the flaw, did not immediately respond to requests for comment.
> ENDQUOTE
>
> http://www.nytimes.com/2015/03/05/business/outdated-encryption-leaves-phones-vulnerable-to-hackers.html?ref=technology&_r=0
>
> or http://tinyurl.com/ppjnbye

The good news is that there is evidently no identified exploit in the 
wild, and the latest versions of Firefox, Chrome, Chromium, and Tor are 
safe. You can check your browser at freakattack.com. As mentioned above, 
Apple will issue patches next week.

-- 
It's only paranoia if there's nobody there.
     And there's *always*someone* there.

[toc] | [prev] | [next] | [standalone]

#70545

In comp.sys.mac.system Alan Browne <alan.browne@freelunchvideotron.ca> wrote:

> http://www.nytimes.com/2015/03/05/business/outdated-encryption-leaves-phones-vulnerable-to-hackers.html

More info here -

https://www.smacktls.com
http://blog.cryptographyengineering.com/2015/03/attack-of-week-freak-or-factoring-nsa.html

Billy Y..
-- 
        sub     #'9+1   ,r0             ; convert ascii byte
	add     #9.+1   ,r0             ; to an integer
	bcc     20$                     ; not a number

[toc] | [prev] | [standalone]

Page 2 of 2 — ← Prev page 1 [2]

Back to top | Article view | comp.sys.mac.system

csiph-web