Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.sys.mac.system > #70527

Re: Old crypto weakness in current OS X, iOS, (and Android ...)

Cross-posted to 2 groups.

Show all headers | View raw

On 3/5/15 11:28 a, Alan Browne wrote:
> QUOTE (From NYT)
> A government policy that forbade the export of products with strong
> encryption in the 1990s has years later left users of devices like
> Android and Apple phones vulnerable to hackers when they visit one-third
> of all websites, including whitehouse.gov and nsa.gov.
>
> Researchers last month discovered millions of devices and websites were
> using an outdated encryption key to secure their communications. The
> weak key resulted from a Clinton administration mandate that software
> and hardware makers use weak cryptography in products exported outside
> the United States.
> END QUOTE
>
> QUOTE
> Apple said on Wednesday it would patch the vulnerability through
> software updates for its mobile operating system, iOS, and its Macintosh
> operating system, OS X, next week. Google said it had developed a patch
> to protect Android connections to websites and provided the patch to
> Android manufacturers. BlackBerry and Amazon, whose products are also
> affected by the flaw, did not immediately respond to requests for comment.
> ENDQUOTE
>
> http://www.nytimes.com/2015/03/05/business/outdated-encryption-leaves-phones-vulnerable-to-hackers.html?ref=technology&_r=0
>
> or http://tinyurl.com/ppjnbye

The good news is that there is evidently no identified exploit in the 
wild, and the latest versions of Firefox, Chrome, Chromium, and Tor are 
safe. You can check your browser at freakattack.com. As mentioned above, 
Apple will issue patches next week.

-- 
It's only paranoia if there's nobody there.
     And there's *always*someone* there.

Back to comp.sys.mac.system | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Old crypto weakness in current OS X, iOS, (and Android ...) Alan Browne <alan.browne@FreelunchVideotron.ca> - 2015-03-05 11:28 -0500
  Re: Old crypto weakness in current OS X, iOS, (and Android ...) Bert <bert@iphouse.com> - 2015-03-05 16:37 +0000
    Re: Old crypto weakness in current OS X, iOS, (and Android ...) Alan Baker <alangbaker@telus.net> - 2015-03-05 09:39 -0800
      Re: Old crypto weakness in current OS X, iOS, (and Android ...) Barry Margolin <barmar@alum.mit.edu> - 2015-03-05 13:07 -0500
        Re: Old crypto weakness in current OS X, iOS, (and Android ...) Alan Baker <alangbaker@telus.net> - 2015-03-05 10:52 -0800
      Re: Old crypto weakness in current OS X, iOS, (and Android ...) Michelle Steiner <michelle@michelle.org> - 2015-03-05 11:44 -0700
        Re: Old crypto weakness in current OS X, iOS, (and Android ...) tmo1138 <tmo1138@tmo1138.com> - 2015-03-06 02:05 +0000
      Re: Old crypto weakness in current OS X, iOS, (and Android ...) Bert <bert@iphouse.com> - 2015-03-06 21:41 +0000
        Re: Old crypto weakness in current OS X, iOS, (and Android ...) nospam <nospam@nospam.invalid> - 2015-03-06 16:57 -0500
          Re: Old crypto weakness in current OS X, iOS, (and Android ...) Alan Browne <alan.browne@FreelunchVideotron.ca> - 2015-03-06 17:18 -0500
            Re: Old crypto weakness in current OS X, iOS, (and Android ...) nospam <nospam@nospam.invalid> - 2015-03-06 17:21 -0500
              Re: Old crypto weakness in current OS X, iOS, (and Android ...) Alan Browne <alan.browne@FreelunchVideotron.ca> - 2015-03-06 17:29 -0500
                Re: Old crypto weakness in current OS X, iOS, (and Android ...) nospam <nospam@nospam.invalid> - 2015-03-06 17:46 -0500
              Re: Old crypto weakness in current OS X, iOS, (and Android ...) Bert <bert@iphouse.com> - 2015-03-07 15:23 +0000
            Re: Old crypto weakness in current OS X, iOS, (and Android ...) dempson@actrix.gen.nz (David Empson) - 2015-03-07 12:08 +1300
              Re: Old crypto weakness in current OS X, iOS, (and Android ...) Alan Browne <alan.browne@FreelunchVideotron.ca> - 2015-03-06 18:11 -0500
            Re: Old crypto weakness in current OS X, iOS, (and Android ...) Alan Baker <alangbaker@telus.net> - 2015-03-06 17:51 -0800
          Re: Old crypto weakness in current OS X, iOS, (and Android ...) Kevin McMurtrie <mcmurtrie@pixelmemory.us> - 2015-03-06 20:14 -0800
        Re: Old crypto weakness in current OS X, iOS, (and Android ...) Lewis <g.kreme@gmail.com.dontsendmecopies> - 2015-03-06 23:14 +0000
          Re: Old crypto weakness in current OS X, iOS, (and Android ...) nospam <nospam@nospam.invalid> - 2015-03-06 18:20 -0500
        Re: Old crypto weakness in current OS X, iOS, (and Android ...) Michelle Steiner <michelle@michelle.org> - 2015-03-06 17:37 -0700
  Re: Old crypto weakness in current OS X, iOS, (and Android ...) Fred Moore <fmoore@gcfn.org> - 2015-03-05 12:22 -0500
  Re: Old crypto weakness in current OS X, iOS, (and Android ...) billy@MIX.COM - 2015-03-05 19:31 +0000

csiph-web