Some 1,500 iOS apps exposed to serious HTTPS vulnerability, analytics firm says

2»

Comments

  • Reply 21 of 29
    markbyrnmarkbyrn Posts: 662member
    One thing is for certain; the Analytics firm SourceDNA is spreading FUD since "1,500 iOS apps exposed to serious HTTPS vulnerability" doesn't mean squat other than making people
    hgysterical. Explain how this vulnerability in one of these highlighted app would magically steal all your credential or just cite a concrete example of how the vulnerability would affect an app like Uber; is somebody going to hijack the taxi you ordered?
     0Likes 0Dislikes 0Informatives
  • Reply 22 of 29
    gatorguygatorguy Posts: 24,769member
    pscooter63 wrote: »
    Oh, and Google has a couple of wayward apps, as well.  How 'bout it, Mr. Gator?

    It's always but...but...Google isn't it? In this particular case they don't have the same exposure to the vulnerability if it exists.
     0Likes 0Dislikes 0Informatives
  • Reply 23 of 29
    tewhatewha Posts: 13member
    Quote:

    Originally Posted by markbyrn View Post



    One thing is for certain; the Analytics firm SourceDNA is spreading FUD since "1,500 iOS apps exposed to serious HTTPS vulnerability" doesn't mean squat other than making people

    hgysterical. Explain how this vulnerability in one of these highlighted app would magically steal all your credential or just cite a concrete example of how the vulnerability would affect an app like Uber; is somebody going to hijack the taxi you ordered?



    It is in the third paragraph of SourceDNA's blog post.

     0Likes 0Dislikes 0Informatives
  • Reply 24 of 29
    djsherlydjsherly Posts: 1,031member
    In the spirit of balanced reporting I'm sure we'll see authors devote time to this vulnerability as is done whenever an Android vulnerability is discussed.
    Heh.

    You should give up forum posting and pursue a career in stand up.
     0Likes 0Dislikes 0Informatives
  • Reply 25 of 29
    djsherly wrote: »
    Heh.

    You should give up forum posting and pursue a career in stand up.
    Perhaps, but spend any length of time here and you'll see that a certain author likes to vociferously trumpet any and all Android vulnerabilities (even when presented with evidence to the contrary) yet remains curiously silent when similar iOS vulnerabilities are presented
     0Likes 0Dislikes 0Informatives
  • Reply 26 of 29
    pscooter63pscooter63 Posts: 1,084member
    Quote:
    Originally Posted by Gatorguy View Post



    In this particular case they don't have the same exposure to the vulnerability if it exists.

     

    Please explain.  I promise, I'm not mocking you, I'm genuinely curious.

     0Likes 0Dislikes 0Informatives
  • Reply 27 of 29
    asdasdasdasd Posts: 5,686member
    markbyrn wrote: »
    One thing is for certain; the Analytics firm SourceDNA is spreading FUD since "1,500 iOS apps exposed to serious HTTPS vulnerability" doesn't mean squat other than making people
    hgysterical. Explain how this vulnerability in one of these highlighted app would magically steal all your credential or just cite a concrete example of how the vulnerability would affect an app like Uber; is somebody going to hijack the taxi you ordered?

    These guys are total spoofers. Firstly the bug was noticed by the open source devs at AFNetworking a month before. They've announced a vulnerability before devs can get a patch out. Spoofers and con men.
     0Likes 0Dislikes 0Informatives
  • Reply 28 of 29
    gatorguygatorguy Posts: 24,769member
    pscooter63 wrote: »
    Please explain.  I promise, I'm not mocking you, I'm genuinely curious.
    Because iOS and Android don't use the same development languages or tools. The open-source AFNetworking library reportedly causing the iOS app issue is not used by Android developers. It's for OS X and iOS. A couple of posters had earlier alluded to that.

    EDIT: Seems the bigger Apple gets the more they attract hackers. Now there's "No iOS Zone" (or is there?). :\
    https://www.skycure.com/blog/ios-shield-allows-dos-attacks-on-ios-devices/
     0Likes 0Dislikes 0Informatives
  • Reply 29 of 29
    gatorguygatorguy Posts: 24,769member
    Rootpipe, the other security issue the AI article mentions in passing in the last paragraph, is probably the one to pay more attention to. That's a separate problem from the one affecting a small number of iOS apps.
    http://www.computerworld.com/article/2912619/mac-os-x/apples-os-x-rootpipe-patch-flops-fails-to-fix-flaw.html
     0Likes 0Dislikes 0Informatives
Sign In or Register to comment.