or Connect
AppleInsider › Forums › Software › Mac Software › Apple reveals security specifics of iOS 5.1.1 update
New Posts  All Forums:Forum Nav:

Apple reveals security specifics of iOS 5.1.1 update

post #1 of 28
Thread Starter 
Following the release of Apple's iOS 5.1.1 update for iPhone, iPad and iPod touch, the company refreshed its support webpage regarding the new software's security tweaks which include one Safari browser and two WebKit fixes.

Monday's iOS 5.1.1 rollout brought various bug fixes including HDR reliability and network switching, though the initial release note failed to mention what security changes made on the backend.

From the updated Support page:
iOS 5.1.1 Software Update
Safari

Available for: iPhone 3GS, iPhone 4, iPhone 4S, iPod touch (3rd generation) and later, iPad, iPad 2

Impact: A maliciously crafted website may be able to spoof the address in the location bar

Description: A URL spoofing issue existed in Safari. This could be used in a malicious web site to direct the user to a spoofed site that visually appeared to be a legitimate domain. This issue is addressed through improved URL handling. This issue does not affect OS X systems.

CVE-ID

CVE-2012-0674 : David Vieira-Kurz of MajorSecurity (majorsecurity.net)

WebKit

Available for: iPhone 3GS, iPhone 4, iPhone 4S, iPod touch (3rd generation) and later, iPad, iPad 2

Impact: Visiting a maliciously crafted website may lead to a cross-site scripting attack

Description: Multiple cross-site scripting issues existed in WebKit.

CVE-ID

CVE-2011-3046 : Sergey Glazunov working with Google's Pwnium contest

CVE-2011-3056 : Sergey Glazunov

WebKit

Available for: iPhone 3GS, iPhone 4, iPhone 4S, iPod touch (3rd generation) and later, iPad, iPad 2

Impact: Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution

Description: A memory corruption issue existed in WebKit.

CVE-ID

CVE-2012-0672 : Adam Barth and Abhishek Arya of the Google Chrome Security Team
The fixes take care of an issue first discovered in March that allowed a malicious website to display a custom URL that is different than a website's actual address. The spoofing technique could have been used to trick users into unknowingly handing over sensitive information like credit card numbers.
post #2 of 28

Google identifying and offering fixes to Apple for Safari security issues, and Apple accepting. Nice to see them working together.

melior diabolus quem scies
Reply
melior diabolus quem scies
Reply
post #3 of 28
Quote:
Originally Posted by Gatorguy View Post

Google identifying and offering fixes to Apple for Safari security issues, and Apple accepting. Nice to see them working together.

Don't forget google uses webkit for Chrome

 

The two things identified by google are in Webkit, not safari.

post #4 of 28
Quote:


Impact: A maliciously crafted website may be able to spoof the address in the location bar

 


Impact: Visiting a maliciously crafted website may lead to a cross-site scripting attack
 

 

 

In y opinion, apple needs to do MUCH better at protecting iOS users.  They are not sophisticated, and so are the perfect candidates for falling prey to these maliciously crafted websites.

post #5 of 28
Quote:
Originally Posted by I am a Zither Zather Zuzz View Post
In y opinion, apple needs to do MUCH better at protecting iOS users.  They are not sophisticated, and so are the perfect candidates for falling prey to these maliciously crafted websites.

 

I want to see how you backpedal your way out of explaining how that's NOT an insult directed at all users of iOS.

Originally Posted by Marvin

The only thing more insecure than Android’s OS is its userbase.
Reply

Originally Posted by Marvin

The only thing more insecure than Android’s OS is its userbase.
Reply
post #6 of 28
Quote:
Originally Posted by Tallest Skil View Post

Quote:
Originally Posted by I am a Zither Zather Zuzz View Post

In y opinion, apple needs to do MUCH better at protecting iOS users.  Many, if not most of them are not sophisticated, and so are the perfect candidates for falling prey to these maliciously crafted websites.

I want to see how you backpedal your way out of explaining how that's NOT an insult directed at all users of iOS.

I spoke too broadly. Thanks for the comment. I improved the post above in bold.
post #7 of 28
Quote:
Originally Posted by I am a Zither Zather Zuzz View Post

 

 

In y opinion, apple needs to do MUCH better at protecting iOS users.  They are not sophisticated, and so are the perfect candidates for falling prey to these maliciously crafted websites.

 

So what would be the device sophisticated people are using?

post #8 of 28
Quote:
Originally Posted by techguy911 View Post

Quote:
Originally Posted by I am a Zither Zather Zuzz View Post

 

 

In y opinion, apple needs to do MUCH better at protecting iOS users.  They are not sophisticated, and so are the perfect candidates for falling prey to these maliciously crafted websites.

 

So what would be the device sophisticated people are using?

 

 

According to a story that broke today, Android outsells iOS on phones by more than two to one.

 

 

Android reclaims 61 percent of all U.S. smartphone sales

Grabbing ground lost during the holiday quarter, Android now holds almost two-thirds of the U.S. market, says NPD Group.

 

http://news.cnet.com/8301-1023_3-57429192-93/android-reclaims-61-percent-of-all-u.s-smartphone-sales/

 

smartphone-os-npd.jpg


Edited by I am a Zither Zather Zuzz - 5/7/12 at 5:55pm
post #9 of 28
Quote:
Originally Posted by I am a Zither Zather Zuzz View Post
According to a story that broke today, Android outsells iOS on phones by more than two to one.

 

The more Android "sells", the less money each phone, each product line, and each manufacturer make. Eventually there won't be any money in making them at all.

 

Apple has three quarters of all the profits. How much is made on each Android phone? A few cents? That can't be sustainable.

Originally Posted by Marvin

The only thing more insecure than Android’s OS is its userbase.
Reply

Originally Posted by Marvin

The only thing more insecure than Android’s OS is its userbase.
Reply
post #10 of 28
Quote:
Originally Posted by Tallest Skil View Post

 

The more Android "sells", the less money each phone, each product line, and each manufacturer make. Eventually there won't be any money in making them at all.

 

Apple has three quarters of all the profits. How much is made on each Android phone? A few cents? That can't be sustainable.

ZZZ is trying to make himself feel better that if Android is losing money for the manufacturers, they surely can make it up by volume.  :)

post #11 of 28
Quote:
Originally Posted by sflocal View Post
ZZZ is trying to make himself feel better that if Android is losing money for the manufacturers, they surely can make it up by volume.  :)

 

And pulling a FreeRange by making his title gigantic, it seems. lol.gif

Originally Posted by Marvin

The only thing more insecure than Android’s OS is its userbase.
Reply

Originally Posted by Marvin

The only thing more insecure than Android’s OS is its userbase.
Reply
post #12 of 28
Quote:
Originally Posted by zzz View Post

In y opinion, apple needs to do MUCH better at protecting iOS users.  They are not sophisticated, and so are the perfect candidates for falling prey to these maliciously crafted websites.

It is more of a problem for highly sophisticated users; you lose all means to protect yourself in a closed environment like a smartphone-- it isn't like you can run netstat to check for abnormal network connections or KisMac to look for abnormalities in wifi access points. Much of security today relies on trust and good human nature despite evidence that it doesn't work.

When it comes to things like checking my brokerage account from my iPad, I worry a bit, despite using my provider's app for most access. It won't get any better until something major changes.
post #13 of 28
Quote:
Originally Posted by Tallest Skil View Post

Quote:
Originally Posted by sflocal View Post
ZZZ is trying to make himself feel better that if Android is losing money for the manufacturers, they surely can make it up by volume.  :)

 

And pulling a FreeRange by making his title gigantic, it seems. lol.gif

 

 

All I did was cut and paste.  It just works like that.

post #14 of 28
Quote:
Originally Posted by Tallest Skil View Post

Quote:
Originally Posted by I am a Zither Zather Zuzz View Post
According to a story that broke today, Android outsells iOS on phones by more than two to one.

 

The more Android "sells", the less money each phone, each product line, and each manufacturer make. Eventually there won't be any money in making them at all.

 

Apple has three quarters of all the profits. How much is made on each Android phone? A few cents? That can't be sustainable.

We've heard over and over again that Android is doomed.  And yet, most people, by a large margin, buy Android phones.

 

And the proportions are getting larger and larger.  Maybe it is Doomed, but ther is scant evidence for that proposition.

post #15 of 28
Quote:
Originally Posted by I am a Zither Zather Zuzz View Post

We've heard over and over again that Android is doomed.  And yet, most people, by a large margin, buy Android phones.

 

And the proportions are getting larger and larger.  Maybe it is Doomed, but ther is scant evidence for that proposition.

 

So, by the logic presented by yourself, most people are 'sophisticated'. Is that correct?

 

It appears that you and reality may be about to have a heated discussion:

 

 

iq-bell-curve.gif

 

I don't think Android is so much 'doomed'.

 

It's probably fairer, and more accurate, to describe it as 'a quality-control infestation that needs to be addressed as soon as possible'.

There's nothing your wife/girlfriend/partner wouldn't like more than your 6 Plus...
Reply
There's nothing your wife/girlfriend/partner wouldn't like more than your 6 Plus...
Reply
post #16 of 28

Apple sells at most, 2-3 models, all under one roof. 

 

Android comes on a vast range of "smartphones" (some not so smart), and a portion of that is junk. 

 

How is Android surpassing iOS market share even remotely impressive? Especially when Android is an utter failure in the tablet space.

post #17 of 28
Quote:
Originally Posted by GTR View Post

So, by the logic presented by yourself, most people are 'sophisticated'. Is that correct?

 

 

 

No, that doesn't follow from anything I said.

 

If you're really interested, I think that every popular platform has sophisticated and unsophisticated users.  It is a matter of proportion.

 

That being said, there are probably many more unsophisticated Android users, due to, if nothing else, the fact that  Android's market share dwarfs that of iOS on phones.  But if you look at proportions, I'm not sure that iPhones really attracts many techno-geeks.  They are not Apple targeted customers.


Edited by I am a Zither Zather Zuzz - 5/7/12 at 8:10pm
post #18 of 28
Quote:
Originally Posted by Quadra 610 View Post

How is Android surpassing iOS market share even remotely impressive? Especially when Android is an utter failure in the tablet space.

 

It is impressive in somewhat the same manner  that Windows surpasses OSX market share.  Especially when Windows was an utter failure in the tablet space.

 

Hey - Apple has done very well in the tablet space so far.


Edited by I am a Zither Zather Zuzz - 5/7/12 at 8:17pm
post #19 of 28
Quote:
Originally Posted by I am a Zither Zather Zuzz View Post

 

No, that doesn't follow from anything I said.

 

If you're really interested, I think that every popular platform has sophisticated and unsophisticated users.  It is a matter of proportion.

 

That being said, there are probably many more unsophisticated Android users, due to, if nothing else, the fact that  Android's market share dwarfs that of iOS on phones.  But if you look at proportions, I'm not sure that iPhones really attracts many techno-geeks.  They are not Apple targeted customers.

 

 

Post 6 - "apple needs to do MUCH better at protecting iOS users.  Many, if not most of them are not sophisticated"
 
Post 8 - "Android outsells iOS on phones by more than two to one."
 
Therefore, if Android outsells iOS on phones more than two to one, and iOS users are unsophisticated, then the majority must be sophisticated.
 
That's what you said, intentionally or not.
 
Don't you hate when reality gets in the way of your opinion? lol.gif
There's nothing your wife/girlfriend/partner wouldn't like more than your 6 Plus...
Reply
There's nothing your wife/girlfriend/partner wouldn't like more than your 6 Plus...
Reply
post #20 of 28
Quote:
Originally Posted by sflocal View Post

ZZZ is trying to make himself feel better that if Android is losing money for the manufacturers, they surely can make it up by volume.  :)

 


If that were the case, Samesung wouldn't have minted billions out of the smartphones last quarter. Having seen such madness as 2Gig RAM on LG (without practical use), one must see beyond just the usability of these so called 'smart' phones. There is a large portion of public out there who just want to flash a smart phone and yet are conservative in spending. They will definitely go for an inexpensive phone or the higher end phones that Samesung sells with higher margins. Many still see iPhones to be expensive and thus will settle for a cheaper version and will give boost to the Android market share. But at the same time, I believe higher end phones do have fat margins (all manufacturers alike) and will not be loss makers. why will a phone cost me almost same as a tablet?

 

Believe me, I have come across so many IT managers who flash a iPhone without a clue on what version of iOS they are running on, what is a podcast etc! For these folks, what ever looks flashy, they will go grab that handset.

post #21 of 28
Quote:
Originally Posted by rBels View Post

 


If that were the case, Samesung wouldn't have minted billions out of the smartphones last quarter. Having seen such madness as 2Gig RAM on LG (without practical use), one must see beyond just the usability of these so called 'smart' phones. There is a large portion of public out there who just want to flash a smart phone and yet are conservative in spending. They will definitely go for an inexpensive phone or the higher end phones that Samesung sells with higher margins. Many still see iPhones to be expensive and thus will settle for a cheaper version and will give boost to the Android market share. But at the same time, I believe higher end phones do have fat margins (all manufacturers alike) and will not be loss makers. why will a phone cost me almost same as a tablet?

 

Believe me, I have come across so many IT managers who flash a iPhone without a clue on what version of iOS they are running on, what is a podcast etc! For these folks, what ever looks flashy, they will go grab that handset.

 

oops...
 

post #22 of 28
My iPad 2 feels more magical after this update.
post #23 of 28
Quote:
Originally Posted by GTR View Post

Quote:
Originally Posted by I am a Zither Zather Zuzz View Post

 

No, that doesn't follow from anything I said.

 

If you're really interested, I think that every popular platform has sophisticated and unsophisticated users.  It is a matter of proportion.

 

That being said, there are probably many more unsophisticated Android users, due to, if nothing else, the fact that  Android's market share dwarfs that of iOS on phones.  But if you look at proportions, I'm not sure that iPhones really attracts many techno-geeks.  They are not Apple targeted customers.

 

 

Post 6 - "apple needs to do MUCH better at protecting iOS users.  Many, if not most of them are not sophisticated"
 
Post 8 - "Android outsells iOS on phones by more than two to one."
 
Therefore, if Android outsells iOS on phones more than two to one, and iOS users are unsophisticated, then the majority must be sophisticated.
 
That's what you said, intentionally or not.
 
Don't you hate when reality gets in the way of your opinion? lol.gif

I see that logic is not your thing.

 

The majority could still be unsophisticated.   Your "therefore" does not follow.

 

Most A's are B.

Most C's are not A.

 

This says  nothing about the relationship of C to B.

 

 

Most oranges are sweet.

Most Fruits are not oranges.

 

Are most fruits sour?


Edited by I am a Zither Zather Zuzz - 5/8/12 at 6:02am
post #24 of 28
Quote:
Originally Posted by I am a Zither Zather Zuzz View Post

I see that logic is not your thing.

The majority could still be unsophisticated.   Your "therefore" does not follow.

Most A's are B.
Most C's are not A.

This says  nothing about the relationship of C to B.


Most oranges are sweet.
Most Fruits are not oranges.

Are most fruits sour?

Good Lord, boy.

At least have the courage to stand by your convictions.

You start off trying to insult iOS users, and are now back peddling furiously. We all know what you meant.

I see that anything more than posting a single snide post on this forum doesn't appear to be your 'thing'.
Edited by GTR - 5/8/12 at 6:40am
There's nothing your wife/girlfriend/partner wouldn't like more than your 6 Plus...
Reply
There's nothing your wife/girlfriend/partner wouldn't like more than your 6 Plus...
Reply
post #25 of 28
Quote:
Originally Posted by GTR View Post

Quote:
Originally Posted by I am a Zither Zather Zuzz View Post

I see that logic is not your thing.

The majority could still be unsophisticated.   Your "therefore" does not follow.

Most A's are B.
Most C's are not A.

This says  nothing about the relationship of C to B.


Most oranges are sweet.
Most Fruits are not oranges.

Are most fruits sour?

Good Lord, boy.

At least have the courage to stand by your convictions.

You start off trying to insult iOS users, and are now back peddling furiously. We all know what you meant.

I see that anything more than posting a singe snide post on this forum doesn't appear to be your 'thing'.

 

Again, what you conclude does not follow from what was said.

post #26 of 28
Quote:
Originally Posted by I am a Zither Zather Zuzz View Post

 

Again, what you conclude does not follow from what was said.

 

Your conclusion, and what you just said, is not so much about about my conclusion and what you conclude I said, and far more about your conclusion and what you said.

 

Any fool could see that.

 

You need to do a little less zithering, a lot more zathering, and maybe you won't end up with so much zuzz.

 

;-)

There's nothing your wife/girlfriend/partner wouldn't like more than your 6 Plus...
Reply
There's nothing your wife/girlfriend/partner wouldn't like more than your 6 Plus...
Reply
post #27 of 28
Quote:
Originally Posted by GTR View Post

 

Your conclusion, and what you just said, is not so much about about my conclusion and what you conclude I said, and far more about your conclusion and what you said.

 

Any fool could see that.

 

 

 

 

In the future, I'll keep the level of my audience in mind.  Thanks for the tip.

post #28 of 28
Quote:
Originally Posted by I am a Zither Zather Zuzz View Post


In the future, I'll keep the level of my audience in mind.  Thanks for the tip.

You're more than welcome!

Now let's hope you've learned your lesson. Go off now and try and play nicely with the other children.

And no more Zuzz!
There's nothing your wife/girlfriend/partner wouldn't like more than your 6 Plus...
Reply
There's nothing your wife/girlfriend/partner wouldn't like more than your 6 Plus...
Reply
New Posts  All Forums:Forum Nav:
  Return Home
  Back to Forum: Mac Software
AppleInsider › Forums › Software › Mac Software › Apple reveals security specifics of iOS 5.1.1 update